Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.cer
File: JHU8qRXk7C0uy5hluQ3V7Q7_BWI.cer (raw, json)
Hash identifier: 6uyH2omOxNaLy1cDhVaGrMF1UzDbdcxdFYAaACrKzVM=
Subject key identifier: 24:75:3C:A9:15:E4:EC:2D:2E:CB:98:65:B9:0D:D5:ED:0E:FF:05:62
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F8B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:33:58 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328819
IP: 102.220.112.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12171 (0x2f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:33:58 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3663E7AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:d2:43:d4:66:6f:57:7a:78:68:3f:5b:e8:
bc:50:2d:6e:f2:7c:ae:bc:b0:e4:07:cf:99:ad:9b:
46:d3:22:45:83:0a:b6:4d:cc:2d:22:08:20:06:2c:
95:e8:40:d9:ef:0b:54:94:10:60:88:4c:0d:b1:bf:
2b:2c:bd:6a:72:f9:0a:f0:14:5f:2a:1e:f2:af:b4:
55:2f:e7:4c:95:c2:67:e1:47:50:ce:8e:c1:f6:88:
f7:3f:1a:a6:b9:8d:19:83:e6:f4:5a:c9:1b:63:72:
a2:f5:74:35:5f:45:e6:a6:78:4e:50:83:4b:4f:61:
91:bf:60:c2:a6:a4:e5:87:aa:2b:d0:c0:ff:29:ac:
fc:a9:86:35:7b:bf:44:f4:3c:ee:19:ba:98:11:43:
c5:f4:49:aa:89:5f:a6:fc:70:55:7e:83:65:d6:e9:
eb:a5:0e:ca:c1:b8:6f:23:1d:fa:fa:98:f0:54:f6:
c1:1d:5b:7c:4d:de:3a:36:42:a4:9c:1f:94:65:5d:
65:80:09:34:7f:3a:ce:12:3b:76:b8:c0:68:e1:95:
3b:4b:61:cd:a7:f0:fc:d7:7d:9d:07:f8:71:82:79:
31:e1:16:32:3e:97:10:66:f3:f3:2b:3d:73:67:63:
95:06:01:74:d9:4f:e6:99:c0:a5:e9:8b:c5:f3:c2:
cf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:75:3C:A9:15:E4:EC:2D:2E:CB:98:65:B9:0D:D5:ED:0E:FF:05:62
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663E7A/83620BEE9C5F11EB9C696121F8AEA228/JHU8qRXk7C0uy5hluQ3V7Q7_BWI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328819
sbgp-ipAddrBlock: critical
IPv4:
102.220.112.0/22
Signature Algorithm: sha256WithRSAEncryption
62:18:6e:7f:68:0d:3c:ec:e8:76:0e:6b:35:68:f9:b1:86:22:
b8:b3:cc:a9:42:1d:59:70:c5:de:88:be:8b:01:e0:a2:6b:67:
ab:50:ca:55:49:21:e5:57:01:63:cf:a9:90:95:91:e3:d9:c4:
29:2b:92:3a:6a:ad:3e:23:f2:06:de:81:23:a1:4a:3f:d2:15:
37:4e:49:d7:fb:06:be:e3:09:3f:f9:b2:c9:b4:9e:4d:e2:a7:
5f:1a:f7:7c:64:f4:bc:45:4d:0a:51:40:8c:eb:de:7a:31:50:
64:c1:65:58:2e:48:8d:81:2b:51:c1:57:9f:c0:c5:de:2b:19:
7b:a6:93:ca:5d:2f:9d:a5:9a:ed:52:34:c2:11:7a:21:58:7c:
cf:29:43:f1:ab:a7:06:5c:42:49:c2:ed:7d:6e:54:43:9d:96:
fa:b0:1c:db:21:82:b4:3d:7b:fb:8e:5c:c8:17:66:3b:af:fe:
4a:02:1f:7e:39:c3:fd:37:2d:75:8e:a3:52:9b:ec:3b:e4:3d:
1d:02:2e:55:c4:a6:a1:8b:5f:7b:8f:e5:f1:91:8f:5e:72:1d:
5d:ed:74:a8:17:71:99:26:b0:05:28:ad:de:62:16:70:be:99:
96:13:c8:52:5f:4a:57:20:73:1b:5f:29:e0:3c:15:00:3f:99:
9a:63:d4:67
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICL4swDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMjMzNThaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjYzRTdBQUYxMTAvBgNVBAUTKDI0NzUzQ0E5MTVFNEVDMkQyRUNCOTg2
NUI5MERENUVEMEVGRjA1NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCyCdJD1GZvV3p4aD9b6LxQLW7yfK68sOQHz5mtm0bTIkWDCrZNzC0iCCAGLJXo
QNnvC1SUEGCITA2xvyssvWpy+QrwFF8qHvKvtFUv50yVwmfhR1DOjsH2iPc/Gqa5
jRmD5vRayRtjcqL1dDVfReameE5Qg0tPYZG/YMKmpOWHqivQwP8prPyphjV7v0T0
PO4ZupgRQ8X0SaqJX6b8cFV+g2XW6eulDsrBuG8jHfr6mPBU9sEdW3xN3jo2QqSc
H5RlXWWACTR/Os4SO3a4wGjhlTtLYc2n8PzXfZ0H+HGCeTHhFjI+lxBm8/MrPXNn
Y5UGAXTZT+aZwKXpi8Xzws8fAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUJHU8qRXk
7C0uy5hluQ3V7Q7/BWIwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY2M0U3QS84MzYyMEJFRTlDNUYx
MUVCOUM2OTYxMjFGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NjNFN0EvODM2MjBCRUU5QzVGMTFFQjlDNjk2MTIxRjhBRUEyMjgvSkhVOHFS
WGs3QzB1eTVobHVRM1Y3UTdfQldJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBHMwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3HAwDQYJKoZIhvcN
AQELBQADggEBAGIYbn9oDTzs6HYOazVo+bGGIrizzKlCHVlwxd6IvosB4KJrZ6tQ
ylVJIeVXAWPPqZCVkePZxCkrkjpqrT4j8gbegSOhSj/SFTdOSdf7Br7jCT/5ssm0
nk3ip18a93xk9LxFTQpRQIzr3noxUGTBZVguSI2BK1HBV5/Axd4rGXumk8pdL52l
mu1SNMIReiFYfM8pQ/GrpwZcQknC7X1uVEOdlvqwHNshgrQ9e/uOXMgXZjuv/koC
H345w/03LXWOo1Kb7DvkPR0CLlXEpqGLX3uP5fGRj15yHV3tdKgXcZkmsAUord5i
FnC+mZYTyFJfSlcgcxtfKeA8FQA/mZpj1Gc=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:35:30 2025 by rpki-client