Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
File: D0ElrSzSvYs64WLz4yLl9YEEdVw.cer (raw, json)
Hash identifier: z2pP0VBfMQP/PhDsLX4kY7PwTHu8zVybsEWy+AWV218=
Subject key identifier: 0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 317E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:16:28 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328286
IP: 102.164.96.0/21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12670 (0x317e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:16:28 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F369E1AEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:ee:09:ae:42:96:fd:6f:4d:42:61:90:f9:
5f:ff:2c:fc:ea:e4:8e:ea:5d:cc:2d:8b:bf:5c:5f:
8d:2a:38:c0:cf:21:63:a6:9f:c7:bf:ba:b2:0a:0c:
ec:0f:c7:ce:40:d6:e2:00:5c:a0:8b:b9:a4:7d:18:
fe:87:0c:29:8d:90:df:cc:75:9d:96:b0:aa:d8:52:
a4:97:9e:94:ff:fe:9c:3e:0f:40:7a:86:32:e9:ec:
d2:ef:b9:53:bd:76:06:6f:86:66:2c:73:9b:2f:d1:
65:a8:d1:02:14:ae:9f:8b:5f:31:9b:96:8a:4e:af:
4c:79:7d:0e:d1:34:f8:e5:ab:a6:ed:30:6e:54:01:
22:04:42:f3:de:62:3e:50:24:3c:9a:f1:ac:05:7a:
e1:17:63:18:a3:7e:1b:a9:15:dd:dd:67:cc:5b:8f:
93:0a:d0:3a:10:54:e0:27:fd:ab:7a:04:9c:a8:d1:
dd:18:58:82:49:77:f6:07:0b:13:32:cf:7e:03:e8:
5e:67:4c:91:0b:0c:a4:6f:c1:da:67:09:08:ef:d1:
6e:ff:23:7f:24:06:fa:25:fb:f2:6c:b1:9b:1f:17:
96:ad:38:aa:c5:41:35:d7:d6:92:d0:fa:fc:03:8f:
57:89:25:7d:1e:6e:5b:0b:a5:4b:43:4d:56:4b:47:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328286
sbgp-ipAddrBlock: critical
IPv4:
102.164.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:af:54:16:f7:7e:b9:5d:09:8c:70:11:49:49:02:05:9e:e7:
94:04:d4:5e:10:41:e2:86:0c:f5:cc:31:b6:30:72:bb:4e:f4:
bd:2a:f6:3c:23:96:52:66:62:ed:c8:e9:ff:a0:9b:d6:51:02:
10:19:ff:56:fb:bf:62:bc:64:36:22:3c:f8:0a:63:3d:79:f2:
6f:a9:dd:0c:c8:29:3b:8d:1a:ab:e0:9e:e9:cb:6b:23:3b:f9:
91:86:14:36:24:f8:73:d2:6e:49:64:02:02:a3:86:5a:e1:60:
45:7d:ba:a5:9c:dc:64:ee:14:73:28:bd:af:57:6e:81:5d:a4:
fd:bd:35:b7:c3:8b:da:b0:26:1a:df:d7:50:c2:84:12:60:65:
8b:8d:f3:c9:9b:f8:af:07:1c:67:b7:2b:50:d0:d8:f3:f4:07:
67:8f:ef:d8:13:1d:b8:56:4b:04:5d:0d:95:d2:2e:4c:83:da:
ce:51:ad:56:ef:bc:61:e3:8e:bb:53:eb:24:82:82:14:75:c9:
20:c9:dd:74:fc:7e:b8:43:e1:e8:6d:24:e0:12:03:ea:df:55:
44:4f:92:15:de:47:2e:ac:37:26:80:bf:ba:67:63:d5:da:4f:
59:17:4c:ba:f1:98:d9:00:55:cf:ec:3a:9d:1c:56:82:5a:59:
c4:97:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:36:31 2025 by rpki-client