Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
File: g9HRV2Bl4FAfLXR0TVFF001qcqo.cer (raw, json)
Hash identifier: 11HyZ/XkeGK6Y/moOD64sVh4EMq/byGrLLCbKG753ac=
Subject key identifier: 83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 30F6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:14 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329289
IP: 102.206.236.0/22
IP: 102.211.220.0/22
IP: 2c0f:f40::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12534 (0x30f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3690D01AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:10:8d:73:70:16:3c:75:71:54:8e:30:92:25:
c9:d3:81:88:b2:bf:ae:14:1e:8b:bb:67:c8:5f:3f:
12:3b:ed:df:0b:de:93:93:35:65:c8:92:4a:6b:8b:
f5:a3:13:1b:54:b1:00:1a:2c:65:16:91:42:4e:37:
9c:ef:82:f6:ce:a5:ee:73:2f:ce:d2:3f:79:1a:85:
cd:98:05:1b:f4:7b:7c:bc:88:7a:c8:2d:84:50:68:
9a:66:01:54:7d:51:a6:82:0b:7b:a7:43:fc:21:09:
c9:ea:9e:df:c9:3c:bc:0a:cd:b9:d7:0e:a4:55:3b:
8d:8b:cb:08:e1:17:70:2f:8f:af:16:fa:e4:e5:ee:
4a:72:e3:12:71:84:00:9c:27:39:a6:4f:78:e1:0a:
3b:24:21:0f:05:0a:15:3d:32:fb:10:a8:5a:45:e6:
37:b7:56:d1:72:9c:41:a1:ec:82:ab:c8:b8:44:29:
77:9a:84:a7:a4:5b:76:3b:8a:f3:ab:bc:be:e0:69:
48:3f:09:ab:bd:1e:66:c0:01:cc:72:b1:44:e4:c6:
54:a8:da:b3:94:eb:6c:4e:37:a1:fc:54:b9:74:c7:
e1:5e:f8:d7:ad:2c:0f:b4:f0:3d:9a:d2:6a:cd:b0:
86:10:53:2c:98:31:db:03:9d:e9:05:a9:34:e3:6e:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329289
sbgp-ipAddrBlock: critical
IPv4:
102.206.236.0/22
102.211.220.0/22
IPv6:
2c0f:f40::/32
Signature Algorithm: sha256WithRSAEncryption
88:ec:98:86:cb:c6:0b:76:5a:6e:5d:1a:ee:27:74:d0:47:1d:
74:53:f1:a5:7f:dc:e3:ab:ac:a4:5f:76:9e:a1:31:31:c2:a0:
d1:0c:90:82:38:7a:55:85:22:69:4e:85:e6:20:c7:57:0d:81:
78:b2:03:5a:c4:56:e6:a5:90:af:ff:60:6c:22:8c:c5:1a:a2:
24:53:60:95:b1:3b:5d:0e:2f:bf:0f:00:59:a2:30:bc:0b:eb:
af:be:f1:3f:36:d6:f0:33:e7:1d:74:3d:ec:a9:2a:d1:79:28:
c9:f4:a6:d1:78:5c:c8:30:d8:37:67:8c:5a:ac:fd:4b:90:c8:
81:ce:da:2f:4a:83:cb:65:1a:05:f6:96:e2:ce:4c:c1:d6:5d:
8b:9e:e5:4a:70:b4:5b:b8:53:f5:5f:af:8f:3a:70:55:09:49:
46:31:ce:60:a9:91:ec:18:18:af:78:a6:af:f4:7b:fd:59:16:
49:a0:e9:22:20:67:17:8a:91:96:bf:71:d6:2d:01:5e:81:87:
5a:95:cb:9f:ed:e9:cf:fa:c4:3f:4e:89:33:6b:74:7b:e7:92:
5b:53:12:2d:55:34:9f:4c:04:ca:ab:26:37:24:d7:32:2e:2e:
b6:01:52:de:e9:b1:ee:6d:02:28:13:df:4b:73:a5:85:4e:97:
3e:d2:14:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:44:57 2025 by rpki-client