Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/P4zuwyrakEaTvUAO9yxqKMfih0g.cer
File: P4zuwyrakEaTvUAO9yxqKMfih0g.cer (raw, json)
Hash identifier: 1I/XG+U8lzp9jjBKVs4x9tCegpXDIgsxuZiZAKOCDaM=
Subject key identifier: 3F:8C:EE:C3:2A:DA:90:46:93:BD:40:0E:F7:2C:6A:28:C7:E2:87:48
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3426
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Sun 02 Feb 2025 08:07:27 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329104
IP: 102.215.8.0/22
IP: 2c0f:580::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13350 (0x3426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Feb 2 08:07:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F550DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:d6:4c:45:19:db:bc:70:d9:e9:38:65:a0:
7f:a4:f4:6d:50:aa:91:2d:4f:32:63:ff:66:6a:b3:
b2:da:28:c5:b6:c4:22:74:b2:f8:40:e7:9b:9b:be:
c0:29:0f:f6:29:f3:51:5d:0a:7e:0a:2f:1e:88:35:
c2:a8:48:a0:63:8e:72:ca:a1:89:cf:87:80:70:70:
02:7b:14:f6:10:10:95:f8:35:22:81:26:ee:21:27:
37:bb:96:e4:68:c7:f9:a4:e8:87:dc:5c:5e:86:9e:
81:49:5f:17:b0:32:7c:7e:ca:7a:45:fa:e0:2d:ba:
a2:d5:74:ff:57:1a:4d:31:66:66:4e:c9:05:d0:d4:
b7:b4:b3:c0:9e:d6:7b:ec:f7:23:42:b8:3e:af:39:
d6:18:0b:5b:e0:5d:a5:42:1a:1f:67:23:25:fd:74:
d7:ba:9f:bc:18:16:bd:5a:bb:ca:6e:7f:d2:07:61:
6d:96:af:82:a8:47:61:fe:5e:5d:18:46:f1:f8:0b:
df:62:69:4e:48:92:ef:ab:04:73:b1:dc:36:69:c4:
cf:04:4a:2a:b4:ef:c6:39:f2:7c:17:cb:00:d4:ba:
bb:db:be:ec:63:10:3c:39:62:89:66:1c:45:f5:0b:
ba:c7:62:8d:f3:a2:0f:95:79:56:16:a4:52:1e:38:
e0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:EE:C3:2A:DA:90:46:93:BD:40:0E:F7:2C:6A:28:C7:E2:87:48
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329104
sbgp-ipAddrBlock: critical
IPv4:
102.215.8.0/22
IPv6:
2c0f:580::/32
Signature Algorithm: sha256WithRSAEncryption
b0:f5:e3:a4:b3:45:a7:96:7e:16:36:76:b3:83:8b:a1:ab:bc:
8b:09:05:bd:ef:f5:dc:dd:7b:e3:94:fd:b6:1c:d6:9d:e9:e7:
fb:a4:22:69:80:85:05:00:dc:7b:8e:01:ac:03:49:6e:b7:7b:
db:97:76:0e:7b:89:38:fd:b3:46:f4:4c:c1:24:4a:c4:78:63:
b1:d8:b0:88:4f:18:c8:51:c8:2b:01:b8:4b:d6:98:07:f0:de:
f7:91:60:5a:f9:df:9b:16:d1:3c:61:87:5d:57:e9:e6:cb:c4:
b9:a1:49:1c:fd:3d:82:9e:60:e6:41:f0:9f:e3:4e:4a:8d:d3:
9e:19:f3:4a:3b:c1:ff:df:4e:e1:9b:11:d5:ef:e5:b3:19:e8:
73:f3:8d:f3:0f:46:0f:28:7b:bf:37:1c:9d:2c:0c:4c:6d:4a:
fc:7c:1d:ea:85:ad:da:f8:2d:6f:b4:34:e4:9d:59:0e:60:10:
d5:3f:07:b8:d9:d1:46:a8:fd:49:8f:fb:a3:85:4b:a8:5d:0d:
ed:b4:35:1a:82:e7:84:9d:d4:ce:e5:da:cc:b3:d8:32:e4:55:
4a:ae:66:be:8e:ef:b2:1c:28:3b:28:ba:39:28:56:ff:b5:eb:
86:fe:18:5f:97:c3:3f:2c:9a:08:27:59:ba:48:32:55:05:09:
3c:6a:9c:a2
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICNCYwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAyMDIwODA3MjdaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkY1NTBEQUYxMTAvBgNVBAUTKDNGOENFRUMzMkFEQTkwNDY5M0JENDAw
RUY3MkM2QTI4QzdFMjg3NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC93NZMRRnbvHDZ6ThloH+k9G1QqpEtTzJj/2Zqs7LaKMW2xCJ0svhA55ubvsAp
D/Yp81FdCn4KLx6INcKoSKBjjnLKoYnPh4BwcAJ7FPYQEJX4NSKBJu4hJze7luRo
x/mk6IfcXF6GnoFJXxewMnx+ynpF+uAtuqLVdP9XGk0xZmZOyQXQ1Le0s8Ce1nvs
9yNCuD6vOdYYC1vgXaVCGh9nIyX9dNe6n7wYFr1au8puf9IHYW2Wr4KoR2H+Xl0Y
RvH4C99iaU5Iku+rBHOx3DZpxM8ESiq078Y58nwXywDUurvbvuxjEDw5YolmHEX1
C7rHYo3zog+VeVYWpFIeOODpAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUP4zuwyra
kEaTvUAO9yxqKMfih0gwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGNTUwRC9CN0JGMjYyNkUxM0Mx
MUVGQkYyQUQwOTQ3NjJFOTUxQS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjU1MEQvQjdCRjI2MjZFMTNDMTFFRkJGMkFEMDk0NzYyRTk1MUEvUDR6dXd5
cmFrRWFUdlVBTzl5eHFLTWZpaDBnLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBZAwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm1wgwDQQCAAIwBwMF
ACwPBYAwDQYJKoZIhvcNAQELBQADggEBALD146SzRaeWfhY2drODi6GrvIsJBb3v
9dzde+OU/bYc1p3p5/ukImmAhQUA3HuOAawDSW63e9uXdg57iTj9s0b0TMEkSsR4
Y7HYsIhPGMhRyCsBuEvWmAfw3veRYFr535sW0Txhh11X6ebLxLmhSRz9PYKeYOZB
8J/jTkqN054Z80o7wf/fTuGbEdXv5bMZ6HPzjfMPRg8oe783HJ0sDExtSvx8HeqF
rdr4LW+0NOSdWQ5gENU/B7jZ0Uao/UmP+6OFS6hdDe20NRqC54Sd1M7l2syz2DLk
VUquZr6O77IcKDsoujkoVv+164b+GF+Xwz8smggnWbpIMlUFCTxqnKI=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:49:25 2025 by rpki-client