Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
File: 41870XBX5RmmOBSWl-AwgOrYdys.cer (raw, json)
Hash identifier: SUksZ/eOtoGqRdwV/TxsJVOVFdZB7GiLwsikIsv34wc=
Subject key identifier: E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 31E6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:39:24 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37519
IP: 154.70.136.0/21
IP: 2c0f:f668::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12774 (0x31e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:39:24 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36ABB63AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:19:46:26:6b:82:f1:2f:21:9f:a4:37:ac:
aa:c0:e8:44:20:12:30:58:42:28:6a:fe:ca:40:36:
b1:40:f7:02:18:d9:b8:51:26:3c:ab:ad:ee:0a:6a:
c2:6a:f5:e2:14:2d:6c:4b:b5:17:22:95:d5:80:2a:
53:ee:ce:5c:e0:02:dc:d0:28:6c:36:60:e4:61:e1:
cd:1a:f4:5d:b1:61:65:c6:be:5f:36:43:11:49:7b:
32:5d:ed:fd:b4:54:72:fe:d4:34:55:af:8b:e1:3e:
b2:87:dc:6c:cd:4e:96:22:a0:72:23:66:3c:a8:13:
9f:5a:d2:16:e8:a4:40:03:9d:38:3e:27:b4:b7:d0:
39:03:79:d4:69:88:af:05:7e:07:b1:13:45:90:d5:
ad:94:60:16:94:cf:1b:d4:ea:a5:4f:b9:52:0a:56:
00:3b:65:24:ea:55:bd:59:05:df:2f:9a:4f:6b:5f:
47:e9:d6:e0:1a:c3:f6:cb:ea:85:a5:52:ba:af:34:
9d:c5:27:18:2d:50:c8:da:67:5d:2f:0c:b7:2a:a7:
43:d7:66:69:7b:61:c7:17:ac:4a:d4:1c:fa:a3:cc:
ae:d8:ad:da:c6:97:bb:e2:a3:25:3a:ca:f3:46:ed:
f2:08:73:2b:fb:76:c8:f8:04:1b:aa:9f:95:2d:5c:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37519
sbgp-ipAddrBlock: critical
IPv4:
154.70.136.0/21
IPv6:
2c0f:f668::/32
Signature Algorithm: sha256WithRSAEncryption
02:78:a0:ff:22:fd:04:c6:af:aa:9f:5e:10:1a:ba:e4:be:f6:
de:1b:5f:6b:f6:0f:b9:cf:43:17:0a:5b:84:28:b6:66:b8:a9:
bc:d5:2c:ed:1d:03:a7:42:0d:01:a8:3a:4f:00:30:8d:7c:ce:
d7:16:84:24:70:89:81:03:08:c8:e0:88:8b:61:f2:e0:22:1b:
89:0e:96:f6:0d:80:49:65:1a:c4:06:79:2f:6a:c8:f8:66:92:
de:53:a3:b4:4a:c5:75:53:fa:8c:2f:24:80:cc:42:40:69:71:
a3:92:fa:97:83:9e:58:09:77:ed:12:95:7c:01:10:3c:8f:84:
e8:21:cc:9d:2f:1c:5f:4e:ab:13:1a:be:ca:46:cd:ae:12:09:
61:30:88:9a:58:22:d7:2a:8d:32:7d:9f:5f:af:60:40:9b:a2:
d7:33:f6:c8:2d:57:fa:1c:47:f4:91:30:aa:e7:8d:fa:39:72:
85:fb:6e:ac:0a:b8:ec:89:42:52:3a:f6:4a:6b:9b:86:32:64:
dc:08:b9:d6:50:24:c9:2f:e9:ba:16:40:bb:e1:ec:5c:79:77:
3f:1c:d2:74:e4:26:29:74:3f:41:5f:30:d2:94:52:24:c7:39:
7d:5f:3c:7e:4c:3f:91:e2:d8:d2:51:af:00:93:f8:bb:1b:19:
0d:b6:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:43:55 2025 by rpki-client