Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
File: EoXp9a6JDQnrah2cFSaY2CVpQXM.cer (raw, json)
Hash identifier: ETbE/vh0leVlKK3D3o2z8AwyfiDzYsz46VbuxO43Te8=
Subject key identifier: 12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3209
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:46:57 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36908
IP: 41.217.200.0/22
IP: 41.223.4.0/22
IP: 197.250.0.0/16
IP: 2c0f:fcf0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12809 (0x3209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:46:57 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B2D09AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:c1:7b:ae:10:5c:84:0f:fc:76:0e:e1:cf:
e7:5f:32:9e:84:41:13:09:85:16:d0:38:0c:1f:fc:
59:18:61:e3:50:dc:32:49:6f:81:cf:11:9f:9e:46:
30:e5:63:dc:43:2b:8a:18:f2:a1:ef:f1:be:37:80:
8e:c8:19:5d:1a:5b:b0:43:70:c9:10:89:55:11:dd:
2a:50:c2:fd:9a:d9:0e:13:c8:14:10:93:ea:94:40:
00:c9:f7:2d:18:1f:84:33:57:0f:86:33:9d:68:73:
e3:40:6f:18:67:97:30:09:c9:6c:05:c4:64:87:02:
3a:03:fe:85:52:d8:2c:7a:ee:3c:0c:92:66:cf:c5:
a7:3b:26:d6:29:3f:e2:2b:64:55:0a:06:c0:f5:f2:
ad:de:b8:2e:4b:89:82:b7:0d:47:ce:0d:a3:82:b3:
a3:90:6e:6f:f7:2c:58:60:79:a0:02:5d:c4:44:b6:
b8:da:09:56:ce:85:68:7c:0a:f5:33:ec:46:ad:2d:
9d:dd:3f:0b:b4:51:5c:78:7a:95:6c:29:3b:17:43:
0c:f6:44:b8:f8:7c:58:51:37:72:aa:f4:19:87:f4:
a9:5b:c7:cc:0f:0c:5d:d2:09:a4:6c:29:84:80:31:
f6:bb:b8:f3:6b:ab:58:b1:d9:2f:8a:ed:33:b4:7d:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36908
sbgp-ipAddrBlock: critical
IPv4:
41.217.200.0/22
41.223.4.0/22
197.250.0.0/16
IPv6:
2c0f:fcf0::/32
Signature Algorithm: sha256WithRSAEncryption
54:a2:44:f1:ec:e4:69:3c:a0:0f:9f:77:20:b9:e2:ac:d1:f7:
92:0b:14:5f:33:07:6e:32:1e:41:6e:77:d9:12:d3:cd:7d:ec:
5a:5c:4e:f6:ff:54:1f:1f:44:10:bf:91:fd:67:48:f3:17:40:
9b:a3:dc:80:33:d8:56:5e:45:fe:b2:d5:2e:bd:3c:7f:71:3a:
ca:58:f3:50:f6:0d:ef:65:64:51:8b:ce:d4:23:fd:2f:e7:15:
33:37:dc:8f:96:64:70:ae:49:48:69:a6:b8:75:6b:3f:62:4c:
47:da:23:7c:b3:28:1f:d1:9b:19:7e:24:be:00:0a:8f:29:82:
48:db:66:ad:69:88:d3:c8:af:b2:ed:d9:61:71:51:ce:ee:d2:
66:7a:8d:86:fe:78:a0:b2:91:b6:f3:ab:ca:2f:ec:45:39:52:
f5:5f:8d:d0:30:5c:84:4c:86:f5:b2:7c:b8:77:f6:41:c1:ba:
c2:7e:ee:08:45:19:af:2d:e6:f8:16:44:46:d6:36:6f:28:78:
94:ef:5e:a4:37:f3:52:24:d4:48:44:7d:ec:f8:3b:0e:c3:36:
a0:59:a8:1b:b3:74:64:24:8f:68:11:83:ab:85:a9:6d:6c:75:
86:23:a5:39:60:9a:8b:ed:05:77:82:48:0a:ef:02:2e:87:88:
e1:38:eb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:30:29 2025 by rpki-client