Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
File: ebDAcmJ2iSrXTH0TD5nweuDmeko.cer (raw, json)
Hash identifier: G9AczirxjS+xGbMOdH15o+l6mAPYhQjbADi0885pAAA=
Subject key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D59
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:37:48 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328590
IP: 102.38.48.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11609 (0x2d59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:37:48 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3625D4AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:87:fd:8e:b5:95:d5:8a:1d:3c:e6:08:22:
61:8f:75:88:6b:f3:56:68:cd:d4:8e:3d:68:a3:8e:
d8:c3:d3:49:a8:39:2f:9b:63:c6:aa:c5:45:05:53:
34:29:6c:87:01:2f:f7:9a:00:4b:59:ee:55:09:3f:
34:46:b8:59:28:ce:c3:cd:6f:e7:a2:05:37:5e:8e:
43:b2:c6:0d:3d:6d:af:08:38:52:a5:56:2a:a3:52:
6e:b2:2d:f2:66:c8:ea:b6:20:22:de:32:90:49:65:
b6:79:a7:bf:ec:69:f8:e9:c6:07:46:06:17:87:04:
fa:10:d3:ef:4b:7c:06:b3:41:d9:5f:8c:6c:ab:39:
09:f5:17:8a:87:e4:3d:94:4c:c8:d0:60:d8:18:74:
0a:1e:1d:86:34:0c:00:25:9e:b3:b4:99:ff:a4:2d:
21:39:79:c3:e1:99:22:92:75:d8:29:ef:8a:73:1d:
e7:17:4f:08:53:f6:95:02:84:b5:47:61:81:67:af:
fc:10:2a:18:83:10:6a:22:b9:0e:ab:b4:b1:0e:c3:
d4:62:ab:26:a2:a1:7a:3c:56:c4:d5:42:b3:28:e7:
1a:ab:df:89:72:41:df:17:40:bb:17:a2:a3:d4:da:
71:20:77:41:a8:21:10:b9:2f:f4:bc:fe:e0:ad:a2:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328590
sbgp-ipAddrBlock: critical
IPv4:
102.38.48.0/22
Signature Algorithm: sha256WithRSAEncryption
66:8d:73:82:28:10:3c:3d:f4:17:7b:48:96:68:c3:93:a0:b6:
26:26:f4:e6:a0:46:63:19:b6:31:be:ed:82:a9:a1:2b:a8:a7:
bd:51:ed:91:d3:15:33:cd:33:46:23:90:2a:3b:d1:0a:1b:b2:
49:55:37:e9:be:67:ef:09:00:d6:04:be:c6:01:ec:8e:8e:52:
f1:a5:27:e2:97:94:28:f4:25:24:ac:55:8b:46:ce:9c:eb:ab:
85:52:67:60:af:76:59:67:3b:ed:d3:e1:63:fe:72:ae:9c:71:
32:54:fb:a2:01:8a:ef:37:48:8d:38:93:5d:4a:9f:f1:d2:ce:
bd:06:4f:45:7a:b8:95:84:31:d2:21:5b:01:ba:39:c7:8e:f6:
ab:6d:7b:5a:f4:2e:fc:0a:f9:c4:12:10:d2:2f:15:c2:34:82:
04:10:10:af:b8:8a:98:1e:9d:2d:18:5c:1f:3e:a9:6d:d1:be:
a3:b2:76:e5:07:23:b9:87:96:1d:cb:bf:17:09:5f:8a:bb:87:
7d:98:68:7b:b7:64:aa:24:b1:0c:05:67:aa:eb:20:6d:b8:9b:
55:97:a1:a6:4a:93:c5:78:dd:7e:51:52:88:4b:ad:ea:cd:8c:
b7:30:d4:64:b4:ee:08:90:a7:7c:6e:82:9f:1b:22:ad:4b:c0:
79:a4:0f:86
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICLVkwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMDM3NDhaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjI1RDRBQUYxMTAvBgNVBAUTKDc5QjBDMDcyNjI3Njg5MkFENzRDN0Qx
MzBGOTlGMDdBRTBFNjdBNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDK5of9jrWV1YodPOYIImGPdYhr81ZozdSOPWijjtjD00moOS+bY8aqxUUFUzQp
bIcBL/eaAEtZ7lUJPzRGuFkozsPNb+eiBTdejkOyxg09ba8IOFKlViqjUm6yLfJm
yOq2ICLeMpBJZbZ5p7/safjpxgdGBheHBPoQ0+9LfAazQdlfjGyrOQn1F4qH5D2U
TMjQYNgYdAoeHYY0DAAlnrO0mf+kLSE5ecPhmSKSddgp74pzHecXTwhT9pUChLVH
YYFnr/wQKhiDEGoiuQ6rtLEOw9RiqyaioXo8VsTVQrMo5xqr34lyQd8XQLsXoqPU
2nEgd0GoIRC5L/S8/uCtokNFAgMBAAGjggMLMIIDBzAdBgNVHQ4EFgQUebDAcmJ2
iSrXTH0TD5nweuDmekowHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzYyNUQ0QS8wM0VGRkM5RUJGM0Yx
MUVFQTZCNDA5NTQ3NzU0MTJFNi8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjVENEEvMDNFRkZDOUVCRjNGMTFFRUE2QjQwOTU0Nzc1NDEyRTYvZWJEQWNt
SjJpU3JYVEgwVEQ1bndldURtZWtvLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFA44wHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJmJjAwDQYJKoZIhvcN
AQELBQADggEBAGaNc4IoEDw99Bd7SJZow5OgtiYm9OagRmMZtjG+7YKpoSuop71R
7ZHTFTPNM0YjkCo70QobsklVN+m+Z+8JANYEvsYB7I6OUvGlJ+KXlCj0JSSsVYtG
zpzrq4VSZ2CvdllnO+3T4WP+cq6ccTJU+6IBiu83SI04k11Kn/HSzr0GT0V6uJWE
MdIhWwG6OceO9qtte1r0LvwK+cQSENIvFcI0ggQQEK+4ipgenS0YXB8+qW3RvqOy
duUHI7mHlh3LvxcJX4q7h32YaHu3ZKoksQwFZ6rrIG24m1WXoaZKk8V43X5RUohL
rerNjLcw1GS07giQp3xugp8bIq1LwHmkD4Y=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:48:04 2025 by rpki-client