Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
File: Pw7qWRltFKMq812hcQ8VDV-d3dg.cer (raw, json)
Hash identifier: Gmu3JJiuuG8dxZyDLqojulU3EJotge8bNOLbbRviG74=
Subject key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2ECF
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:56:08 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37523
IP: 154.65.64.0/20
IP: 196.43.213.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11983 (0x2ecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:56:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3652C3AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:0a:8b:72:28:fb:1e:3a:63:54:ec:d5:50:
d6:cd:08:d1:7c:a7:17:2a:f6:74:60:6f:1b:9c:e2:
d7:03:ce:14:f1:63:fd:8a:c4:00:dc:8a:25:3c:7b:
c3:4d:5c:79:f9:e6:f4:e7:be:69:a8:cf:ba:c1:3e:
48:8c:3d:5f:cd:bc:ce:c9:16:bb:fd:f7:11:91:b1:
fe:6d:5c:29:12:29:84:54:ec:f8:3e:0d:4b:af:97:
75:ba:12:85:4a:e8:d9:f4:26:d0:43:c2:78:68:7a:
71:fd:d6:70:62:8b:04:d8:16:72:ec:0a:91:b0:85:
92:25:a9:1b:e9:50:0e:fa:39:39:5b:4f:c8:3c:9e:
a7:2f:51:1c:89:51:54:57:8b:3d:9b:49:88:7d:86:
5f:8d:9b:56:70:a5:3d:24:06:7f:a4:cb:dd:65:c0:
e2:fc:4d:22:d6:9b:33:57:1e:99:c0:ab:8f:83:2e:
ad:6c:db:9c:53:a7:01:1a:7c:6a:2f:0e:08:da:87:
30:35:c2:77:a2:fb:fc:6c:43:f3:60:43:be:6d:92:
fb:24:d4:e0:46:a8:9f:85:1c:88:8b:db:47:7f:d4:
9d:76:5c:02:01:09:c7:23:22:80:8b:6a:98:63:23:
5c:09:1c:2c:63:e0:fd:4f:eb:3a:f5:4d:5c:da:79:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37523
sbgp-ipAddrBlock: critical
IPv4:
154.65.64.0/20
196.43.213.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b5:6c:70:a4:b9:4e:0e:8e:cb:ad:45:b0:2b:e0:d2:fc:31:
2c:52:75:2d:ad:1c:28:7a:38:e9:48:3f:f8:a9:6c:b5:b9:fe:
e4:5f:cf:9d:20:c8:a1:ed:bd:97:4a:9c:d0:08:32:28:58:cb:
a4:be:a1:8a:28:11:1a:5d:62:e8:00:3b:25:75:c3:90:82:a7:
c8:c0:10:eb:1f:d6:0e:b3:4f:d6:e8:71:e2:0c:57:ce:81:47:
39:d8:3e:ff:71:9b:bb:a5:7f:e7:a0:37:c5:d1:f5:e0:93:fb:
eb:ff:4b:b4:c7:a1:8c:0b:a7:85:91:fb:81:88:80:c1:11:b3:
1a:d1:65:12:54:ee:be:9b:a6:89:8e:24:50:5b:a5:bc:ed:6a:
2a:17:f6:5d:03:c0:49:a5:58:10:c8:ab:e4:7d:b9:ce:24:5d:
60:33:01:ec:be:af:46:64:37:7e:3b:06:19:e2:f0:b1:81:23:
d7:cb:fb:df:0b:24:ed:36:4c:e8:54:23:aa:29:12:2b:34:5a:
1c:4b:fe:0d:c4:90:7f:7c:6d:da:e1:d3:28:86:de:54:85:1b:
0a:95:e1:0a:e4:db:6d:e5:21:35:09:ba:7c:e0:4e:15:32:e7:
2b:ef:06:1c:f6:98:f0:5b:f7:65:cc:c6:9e:88:8b:34:fa:39:
1b:46:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:19 2025 by rpki-client