Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
File: cHofKGrimG32SRDDA05RiafCFt0.cer (raw, json)
Hash identifier: JMq07O8268sDyk7otqgElITHpYt/27Gfzwqzyg+jEiE=
Subject key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E4E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:29:29 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37731
AS: 328137
IP: 102.215.236.0/22
IP: 2c0f:f030::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11854 (0x2e4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:29:29 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3644DAEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:ee:27:a2:db:f8:4e:88:62:dd:cc:0f:fc:
f8:d0:75:f3:f1:c0:13:29:79:cb:95:44:e0:0b:c4:
f7:c9:2a:20:2b:bd:00:ac:c5:0b:97:4f:69:b0:30:
51:d8:7d:9e:ff:0d:d6:61:dd:ab:be:b0:03:57:f5:
31:3d:94:80:67:d4:d0:2c:f7:4e:32:b2:6a:3a:a5:
eb:8d:bd:38:70:8a:00:24:e3:c7:04:21:c2:e0:6a:
43:03:9b:e9:1e:ac:68:6f:ac:18:af:e6:1b:ae:03:
eb:82:83:08:7b:4f:8e:7b:3f:6e:b3:a6:c4:6b:c2:
b8:de:3b:b8:d9:3d:ac:e0:a5:73:b7:b9:2e:66:c8:
e5:62:6d:23:90:87:63:77:9b:1c:1c:2f:db:8f:e5:
b4:45:11:7c:11:85:23:ca:e8:ba:e4:20:b0:e2:a4:
62:75:db:f6:63:57:a0:2c:3a:ed:81:c4:45:ce:be:
77:00:e2:17:8f:95:c5:96:c3:cc:96:e7:31:0a:5f:
05:e1:1d:61:a1:ff:d9:4b:75:c2:ff:e9:d1:ce:57:
97:ad:f6:b8:ea:5d:8a:e5:c4:01:40:3d:d3:b7:31:
4e:4e:e2:22:48:4f:8a:b8:3f:26:88:0d:3e:2f:0b:
c5:e4:40:9d:45:29:5f:c9:ea:1d:51:9b:b6:b6:17:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37731
328137
sbgp-ipAddrBlock: critical
IPv4:
102.215.236.0/22
IPv6:
2c0f:f030::/32
Signature Algorithm: sha256WithRSAEncryption
29:d4:fc:ba:64:12:f0:24:f9:8e:5d:6a:ed:0a:05:e6:52:5c:
7a:0e:28:d2:d5:87:7c:da:de:fe:f5:53:a7:9a:b7:e0:fe:8f:
82:81:17:d6:3e:41:77:81:44:c5:34:78:48:b2:58:1b:5d:f9:
55:42:7a:50:9d:19:27:39:c2:8c:25:5b:42:94:90:30:01:e5:
c6:b5:75:e7:06:d9:c5:b7:b9:07:7e:19:e7:dc:91:e1:b2:7a:
58:48:da:b3:d5:5e:22:fa:40:b0:1c:97:c6:46:56:f1:63:ef:
39:f0:00:c0:9a:61:fb:16:13:18:14:b2:8b:01:a8:5c:79:57:
e4:b8:fb:80:3e:cb:3f:8e:c4:ce:e7:e7:dd:97:ab:46:e0:ab:
09:34:5e:7a:74:2e:37:ad:79:64:3e:87:9b:25:35:40:fa:b7:
44:b8:03:cf:27:68:d6:dd:24:c2:7f:88:e4:be:b5:a6:ce:be:
03:c9:52:4d:c9:37:97:b0:03:56:96:bd:0c:a8:d8:d7:cb:66:
f6:19:a2:18:24:7b:f0:dd:19:58:e0:71:a7:32:f0:cd:6b:4f:
c6:2a:b8:4a:34:99:55:58:e7:9a:c6:31:13:3c:3e:c1:b0:a0:
a6:0b:19:ad:78:1d:84:3b:8c:33:e5:0d:43:8f:b5:50:69:60:
13:eb:9d:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:40:34 2025 by rpki-client