Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
File: NewylCgvp6NUePgvkJSwP-Jgb7Y.cer (raw, json)
Hash identifier: 36v5V8Kbj1Pl2WAWMm9UOZpNyT7mID/iOzMoozdzodI=
Subject key identifier: 35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 31E2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:38:25 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328266
IP: 102.135.240.0/21
IP: 102.208.236.0/22
IP: 102.216.76.0/22
IP: 2c0f:ef18::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12770 (0x31e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:38:25 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36AB1CDAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:6c:3e:a5:4a:37:8e:93:d7:d7:10:c9:03:
02:72:50:3e:ee:3d:ac:cb:a2:42:c5:d0:ac:bc:33:
69:6a:7c:14:ec:66:40:e0:91:7c:18:1e:f6:8e:f3:
e9:06:4e:8f:e3:b3:c0:86:51:3c:00:0d:c2:f2:1e:
51:25:55:14:45:61:e3:88:bc:66:fd:78:71:4b:18:
b8:4c:d8:ef:0a:0c:c7:d5:0d:4d:4e:c5:59:cc:ee:
7c:a0:e1:4e:83:af:ba:ef:18:60:fc:6c:a6:5f:9c:
86:42:eb:5c:9e:d7:ec:ce:64:e6:5e:68:84:d4:d9:
21:07:57:ae:cc:3a:b8:60:55:5a:92:f0:17:c1:1f:
cd:dd:7c:76:3e:3d:c1:bc:9a:27:74:9e:b5:d9:bb:
69:f9:76:98:dc:71:4e:18:50:67:9a:92:b5:5d:20:
4f:89:f8:b8:78:ba:72:9f:3f:81:50:a5:16:a3:75:
35:e0:01:37:ea:d8:23:98:8a:df:f2:7f:2b:24:93:
01:6c:5b:13:12:fd:0c:ba:d4:91:86:d4:ce:2d:14:
36:9f:92:ff:db:62:d2:89:3b:38:e7:eb:60:cb:02:
d5:82:c5:e6:2a:82:00:b7:43:1a:f8:ec:12:4b:dc:
72:3e:ed:7a:84:a4:b2:a7:53:dc:35:ed:19:c6:4a:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328266
sbgp-ipAddrBlock: critical
IPv4:
102.135.240.0/21
102.208.236.0/22
102.216.76.0/22
IPv6:
2c0f:ef18::/32
Signature Algorithm: sha256WithRSAEncryption
94:b4:be:76:32:bc:85:09:ab:5d:06:60:93:d4:31:0d:d3:96:
cc:d2:3c:0c:f2:64:d8:ea:5a:60:55:5c:71:86:16:05:46:26:
c0:1d:6a:a5:87:83:91:fb:cd:9e:46:d4:c6:9e:94:d5:1d:61:
61:89:06:d4:23:e7:8b:2b:a7:18:e8:77:81:85:e4:cd:9e:4b:
95:35:b4:1b:83:88:57:46:9c:ee:0c:ca:ab:6f:a1:25:09:95:
cf:40:ef:e9:15:9c:a5:1f:21:1c:1f:6e:f5:a3:25:64:34:2d:
21:a0:21:e5:91:89:c9:bc:60:c3:4c:61:41:65:a4:db:4a:f6:
d6:f6:8f:74:29:9c:05:62:2a:72:61:30:33:be:77:65:22:06:
65:a5:ab:82:ef:26:fd:71:92:ff:08:71:66:8d:99:dd:7c:e4:
f7:ae:ef:cc:48:f7:2f:b4:56:c7:e1:62:2d:30:ac:e8:7b:2c:
9e:86:95:6b:3c:b9:ed:d7:26:b8:5b:b0:8a:db:fd:bc:f3:a8:
93:24:d0:a0:81:e9:10:24:83:30:ee:3b:c1:15:20:44:e1:69:
b2:38:b9:b4:9c:88:68:34:f9:ba:ef:33:e5:cc:7b:17:1b:b5:
66:46:24:d6:80:9a:78:03:e6:26:7e:69:0e:05:4e:14:32:70:
cb:af:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:21 2025 by rpki-client