Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
File: A_5dcm806TzhqV2UUY4SI3rD4sY.cer (raw, json)
Hash identifier: Jr2aY09D2wxVGUuBiT1O27fNBtxwU4A8GlraJfLj/mE=
Subject key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3182
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:17:20 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 5536
AS: 37725
IP: 102.218.128.0/24
IP: 102.218.130.0/24
IP: 102.219.22.0/24
IP: 102.220.125.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12674 (0x3182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:17:20 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B3234AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:93:25:61:dc:00:3b:f7:1c:15:a5:e3:ea:
42:fd:68:88:1a:6b:63:93:93:08:9f:2e:7d:84:0f:
46:a0:5a:7c:88:60:cd:8c:05:60:77:44:8a:fa:15:
fc:9e:44:5c:ef:64:56:f0:72:0c:0b:8e:22:28:98:
4a:f9:e9:19:7a:1f:66:d1:5c:92:07:b5:52:8d:f3:
d4:01:66:11:7e:45:93:2d:41:3f:46:c5:97:91:6f:
f7:82:f0:41:99:5d:f9:19:6b:6f:b4:13:ff:5f:74:
a7:71:90:7a:07:99:f5:47:39:67:9c:ef:72:ca:95:
a5:18:12:cb:d1:7e:cf:0d:df:a1:63:38:eb:53:7b:
ed:8e:c8:40:7f:7a:3f:4a:80:77:5e:f0:b4:c6:1a:
7c:ef:14:25:84:31:27:82:18:ef:e6:f3:f9:fa:92:
86:a8:24:74:84:be:7f:5b:04:ee:34:8d:89:24:6c:
a6:fb:b5:d5:d9:6c:1a:70:97:df:06:84:13:23:70:
9e:a2:38:b7:f2:1e:cc:a0:50:08:fc:61:ff:d9:89:
c6:23:56:47:dc:21:96:15:74:9b:82:e9:b7:69:3c:
fa:c9:bc:e9:d1:b3:7a:cb:d8:7a:d5:72:e4:c1:1d:
40:0f:59:29:47:e1:4e:39:c1:01:3d:f9:be:0b:72:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5536
37725
sbgp-ipAddrBlock: critical
IPv4:
102.218.128.0/24
102.218.130.0/24
102.219.22.0/24
102.220.125.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e4:4a:55:60:ca:37:3b:d5:e3:1b:74:80:a8:8a:df:1f:2e:
8d:fd:d0:18:27:5b:43:01:04:bd:37:07:2a:74:60:ae:6a:a7:
e1:51:c9:1d:c7:25:31:d5:6f:ac:04:ee:48:89:59:cb:20:29:
dc:23:05:8c:97:cc:47:60:4f:4c:30:32:a8:5e:04:21:da:f9:
3b:4a:2b:90:dc:a2:2b:47:c1:75:50:69:40:d8:3e:1c:00:41:
3f:2b:b8:6c:e9:37:bb:ab:03:b1:25:9e:27:e2:a6:d1:d9:ab:
8d:2f:5a:38:11:38:4d:0f:31:73:05:b1:61:09:1d:cc:8e:d6:
bb:df:12:b4:35:61:36:f9:6e:36:04:c1:5d:fb:5e:21:ea:7b:
63:27:e5:03:64:c9:d3:be:8b:70:62:73:e0:3b:54:8d:12:25:
4b:6d:a3:23:74:86:98:43:a0:7b:62:47:9b:f9:be:cf:cb:24:
80:49:85:ab:84:e1:36:0f:f9:a6:ae:27:f2:3b:8b:e8:85:28:
ee:4e:3a:ef:74:df:fb:0c:14:5d:28:02:65:bb:31:58:74:e9:
97:09:ff:43:27:75:13:f2:9b:83:49:38:68:66:40:71:df:b4:
da:10:28:ef:93:42:1c:e8:04:f7:c1:cb:b5:8c:5c:51:b3:28:
80:c8:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:56:25 2025 by rpki-client