Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/WNo74zGmEqquT2owY3cEBjrD3UI.cer
File: WNo74zGmEqquT2owY3cEBjrD3UI.cer (raw, json)
Hash identifier: YlxdXHTCQ0A1tAeC6s/gjRdvQsPuIK5rHpbxQl8dZTk=
Subject key identifier: 58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 32BA
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:24:28 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328988
IP: 102.208.96.0/22
IP: 102.213.68.0/22
IP: 102.218.48.0/22
IP: 2c0f:6f00::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12986 (0x32ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:24:28 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36CA351AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:44:36:c0:58:ca:f6:0f:60:bd:b7:dd:15:
28:a2:f4:30:56:20:72:81:0b:7d:cd:e5:ad:38:ff:
6d:72:f2:f1:26:6d:2e:0c:43:c4:fb:e6:ca:70:cb:
fc:ad:5e:c4:7a:8f:cc:19:e1:27:90:ce:da:20:76:
21:86:44:74:01:5f:5e:77:ca:ca:ab:6e:11:4f:c5:
e0:34:88:6a:ba:ec:7b:6a:5c:76:9a:39:e9:25:b1:
23:1a:8d:9c:b6:2e:bd:cc:ca:2e:a1:18:90:4a:bf:
93:6e:41:74:6a:08:c0:db:20:a2:31:51:4d:e9:da:
97:2b:88:9e:56:e1:70:30:fa:24:9d:b0:04:19:45:
3f:5e:82:dd:d1:33:0f:b1:f4:9f:00:65:93:8b:72:
2c:09:2c:dc:96:71:c4:59:0c:5a:76:9c:55:61:e1:
08:80:5c:f1:f0:4a:a3:3d:09:81:19:1e:6a:a1:f5:
3c:f9:8e:7a:be:c4:08:5b:1d:d1:aa:89:f7:c1:ab:
b6:41:c5:8b:e1:76:b7:d6:d7:34:db:63:0a:10:90:
05:03:95:15:51:68:d2:7a:0e:78:d2:8e:ab:55:ea:
50:03:ca:b3:74:f3:55:17:ab:c1:3d:30:9b:a9:ac:
8e:6a:4c:e6:99:25:a3:d7:8a:fd:2f:04:9f:66:aa:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DA:3B:E3:31:A6:12:AA:AE:4F:6A:30:63:77:04:06:3A:C3:DD:42
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA351/D8E6C5EAC2E611EE8B90697B775412E6/WNo74zGmEqquT2owY3cEBjrD3UI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328988
sbgp-ipAddrBlock: critical
IPv4:
102.208.96.0/22
102.213.68.0/22
102.218.48.0/22
IPv6:
2c0f:6f00::/32
Signature Algorithm: sha256WithRSAEncryption
99:47:6d:17:94:a2:9c:f7:b5:a3:4b:7a:41:2b:cd:56:56:ca:
fc:25:b8:7a:b0:cc:5a:8c:f6:93:82:c0:98:ec:e1:3e:9d:c6:
7e:cf:ce:7b:de:a8:8c:bd:5f:75:fe:0d:18:3a:ea:7b:c1:d5:
0c:6f:09:18:73:54:b6:cd:7a:d1:1c:ae:3e:3f:45:b2:35:ff:
52:07:b7:b8:1a:e1:b2:c7:af:72:38:b1:e9:c3:b1:9e:41:4d:
8c:77:4a:b3:56:e9:23:07:08:bb:6c:ee:e4:41:44:b1:83:f4:
7e:a6:34:2b:df:86:e5:60:ee:9a:0e:6f:00:4e:fd:71:62:eb:
50:4a:23:f2:f3:b0:30:6c:60:fd:1c:2d:cd:14:e9:87:d2:23:
a1:50:19:9e:1e:0e:a6:c3:44:5e:d8:48:1b:df:8e:65:f2:7a:
3b:58:89:23:77:ff:8e:37:17:2f:50:69:ca:79:62:b9:e2:17:
c5:70:91:14:27:e3:8b:40:60:fa:83:e8:14:40:ad:d5:cd:9b:
e7:bd:4d:95:22:09:67:34:76:e4:08:58:85:12:b8:39:d6:37:
e5:4a:5f:be:e2:bb:a2:14:d8:18:81:b3:73:12:e3:30:6c:d1:
c1:75:40:35:20:05:46:2b:1a:bf:46:74:2f:33:d5:9a:e8:18:
a0:cc:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:49:25 2025 by rpki-client