Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
File: Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer (raw, json)
Hash identifier: QX9yreYq8w+uyFRMkZG6sKfqCAIWiREimylB4wEb4Nk=
Subject key identifier: 67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 31D9
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:36:36 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328730
IP: 102.221.196.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12761 (0x31d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:36:36 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36AA788AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:25:88:3d:36:98:75:a1:79:cc:3c:90:b5:
dc:e2:e9:4f:2e:7a:8f:3a:f8:97:2f:a9:3f:28:41:
bf:2c:7a:0f:10:29:fc:47:29:d5:fd:a3:e0:0e:f1:
bd:a1:21:88:fd:6b:86:b1:c8:e9:50:59:6c:09:1e:
ee:4e:65:f0:60:c1:5a:15:0f:79:65:83:a5:d8:e8:
04:22:65:b6:dd:5f:ef:34:57:e5:dc:c1:f5:14:d8:
a4:3c:ed:ea:31:45:9b:2f:38:0b:68:be:e8:50:a1:
9c:f8:a0:00:ac:b5:b4:bd:8b:f7:96:f0:88:a2:61:
8f:89:17:12:09:da:a8:41:99:ab:05:4f:8c:1d:2a:
5c:64:aa:4f:d2:0d:7e:6b:94:4c:fd:f9:90:90:94:
14:6e:7f:1a:06:5f:6c:2e:08:4d:b8:de:58:0a:35:
17:82:57:c2:b1:a5:b3:e4:77:2b:b0:62:78:10:5b:
f3:ef:cd:6d:c2:62:80:13:42:b6:6a:86:c9:7b:9c:
16:b0:f9:61:0c:ed:81:19:cd:0d:63:fb:cd:c7:ec:
92:a1:2c:b9:88:5f:20:34:87:00:d9:9c:09:bc:e6:
8d:0b:59:56:0c:b9:61:8a:77:bf:1f:d4:17:a2:4c:
c3:16:0b:02:27:52:99:f5:0b:3e:a7:50:ae:37:ba:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328730
sbgp-ipAddrBlock: critical
IPv4:
102.221.196.0/22
Signature Algorithm: sha256WithRSAEncryption
08:d4:12:61:8a:1c:d0:57:51:1e:b7:db:38:b2:0d:75:a5:66:
7b:29:cb:b8:f9:dd:c1:f7:79:be:e3:4d:c2:28:93:26:e4:67:
e2:69:85:9e:b8:61:ee:c8:c3:44:f1:13:b4:69:b9:37:d3:53:
e4:4a:6e:dd:d8:85:9d:fa:94:78:48:71:9c:91:1e:13:6b:42:
a6:4d:3c:ba:7e:38:c4:03:40:4a:b0:a1:99:ce:49:42:f2:49:
de:1c:07:d1:37:a7:23:50:b5:27:a3:37:4f:d4:22:55:27:46:
3e:06:32:d9:12:a1:5b:9d:cc:59:da:d5:b2:28:36:98:0d:31:
7e:fe:1c:ac:38:cc:ca:65:58:4a:bf:9e:61:54:e2:8d:8b:d1:
0a:b6:79:80:a7:6b:a7:fa:31:b2:f1:a2:96:40:79:cc:3c:d0:
7b:5a:cc:5e:c5:c7:ec:b4:ca:e4:06:78:63:e2:dc:dd:78:36:
37:ec:99:90:83:96:f3:2f:b5:46:92:31:88:0c:12:7f:22:ff:
26:5e:61:d7:6e:5f:f2:98:eb:67:13:3e:48:50:01:bb:ab:c3:
2f:8b:6d:ca:51:2c:6d:89:7f:de:90:47:0d:ff:b7:73:6e:26:
39:b0:af:3b:00:40:b1:0c:b9:e7:7e:c1:36:5a:9c:98:7b:6e:
b0:fc:a3:be
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICMdkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwNDM2MzZaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkFBNzg4QUYxMTAvBgNVBAUTKDY3QzgyRUIzQTJCMURBQjczOTkxRkEy
M0ExMjhBMjUxNzUyRjMzNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5jSWIPTaYdaF5zDyQtdzi6U8ueo86+JcvqT8oQb8seg8QKfxHKdX9o+AO8b2h
IYj9a4axyOlQWWwJHu5OZfBgwVoVD3llg6XY6AQiZbbdX+80V+XcwfUU2KQ87eox
RZsvOAtovuhQoZz4oACstbS9i/eW8IiiYY+JFxIJ2qhBmasFT4wdKlxkqk/SDX5r
lEz9+ZCQlBRufxoGX2wuCE243lgKNReCV8KxpbPkdyuwYngQW/PvzW3CYoATQrZq
hsl7nBaw+WEM7YEZzQ1j+83H7JKhLLmIXyA0hwDZnAm85o0LWVYMuWGKd78f1Bei
TMMWCwInUpn1Cz6nUK43upSPAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUZ8gus6Kx
2rc5kfojoSiiUXUvM1IwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZBQTc4OC9BQ0RBMDYzNjMwMUQx
MUVEOTJDOTc1OTVGMTIyMjQ2OC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QUE3ODgvQUNEQTA2MzYzMDFEMTFFRDkyQzk3NTk1RjEyMjI0NjgvWjhndXM2
S3gycmM1a2Zvam9TaWlVWFV2TTFJLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBBowHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm3cQwDQYJKoZIhvcN
AQELBQADggEBAAjUEmGKHNBXUR632ziyDXWlZnspy7j53cH3eb7jTcIokybkZ+Jp
hZ64Ye7Iw0TxE7RpuTfTU+RKbt3YhZ36lHhIcZyRHhNrQqZNPLp+OMQDQEqwoZnO
SULySd4cB9E3pyNQtSejN0/UIlUnRj4GMtkSoVudzFna1bIoNpgNMX7+HKw4zMpl
WEq/nmFU4o2L0Qq2eYCna6f6MbLxopZAecw80HtazF7Fx+y0yuQGeGPi3N14Njfs
mZCDlvMvtUaSMYgMEn8i/yZeYdduX/KY62cTPkhQAburwy+LbcpRLG2Jf96QRw3/
t3NuJjmwrzsAQLEMued+wTZanJh7brD8o74=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:31:53 2025 by rpki-client