
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
File: gBdkcAW5GRQgyZGxrgeYtayhTQw.cer (raw, json)
Hash identifier: EKVnakJltU2HlwLDYK1yP2SkWqF5u3cbPhuOmaZpBho=
Subject key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DBB
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:59:15 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37025
IP: 102.219.194.0/23
IP: 196.6.228.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11707 (0x2dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:59:15 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3632CFEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:66:8d:d5:a5:c6:9b:8e:69:ee:8d:04:30:
ec:a0:2a:96:00:d3:16:71:57:61:9a:3c:b1:20:7d:
52:07:68:7b:ba:fe:97:52:13:1d:1d:9e:f1:59:fc:
11:8b:6e:25:1e:e5:6c:ce:19:23:e1:1c:da:eb:91:
01:d1:42:02:96:d9:85:d0:5b:d0:28:ad:68:81:00:
81:ba:44:75:42:07:0f:19:0c:74:94:63:70:69:f0:
fa:32:71:88:90:ce:39:f5:38:5e:dd:30:cf:0d:e5:
14:3d:01:7d:bd:20:b4:53:e5:e3:fe:2b:a3:b0:58:
9b:52:15:93:e4:58:eb:83:86:e2:6f:08:5a:71:69:
df:2c:77:68:8c:5d:c0:65:4d:0f:72:aa:fb:63:25:
cd:4c:e6:de:d8:2a:63:9b:d5:26:73:81:51:fd:4d:
32:6d:8d:3f:9c:6f:f7:f2:33:4b:61:72:e9:99:94:
ed:cb:89:8b:88:2a:1c:2e:17:d9:99:10:02:76:36:
ec:4f:36:ec:ad:14:30:de:5e:93:78:8a:0c:b4:73:
99:19:ca:56:6a:c9:b6:9a:dd:30:80:78:05:50:66:
f8:a6:74:36:fe:98:fc:d4:38:bd:9a:04:8d:27:96:
5e:c6:c0:8c:b5:c3:9d:61:70:73:30:fb:bf:39:df:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37025
sbgp-ipAddrBlock: critical
IPv4:
102.219.194.0/23
196.6.228.0/24
Signature Algorithm: sha256WithRSAEncryption
60:1a:e0:5e:39:98:fb:8d:b3:db:e4:43:03:18:78:2c:69:49:
c0:e1:75:60:ed:de:95:62:9a:1c:63:7d:eb:8b:d9:af:90:d1:
2f:c5:95:50:c1:44:84:46:25:9a:61:c8:69:70:1d:1e:39:71:
fb:69:0c:27:31:b8:1b:c7:3a:fd:16:e1:42:49:6a:46:bd:4f:
36:3c:90:d2:ab:e1:8f:67:f4:a3:51:f1:54:76:95:77:a6:93:
f0:9e:29:ab:35:67:63:28:76:28:1b:fe:cf:73:d5:63:f7:3e:
55:13:4a:5d:78:7b:fa:3e:7d:49:55:54:87:03:64:e1:b8:75:
10:5a:15:18:f7:35:8b:1f:fd:61:cc:44:b4:68:11:6e:29:53:
ce:a7:ea:af:37:59:cb:f8:41:e0:a1:b3:fe:58:9c:f8:04:42:
ec:be:e1:48:98:23:2d:5d:5b:84:10:a0:b9:d1:58:ec:af:0e:
6f:2a:c5:c4:73:f0:4f:ec:6f:e6:bc:7d:01:7b:37:27:c1:ff:
2b:36:a8:c0:c9:10:62:7d:7b:3c:43:1f:ac:0f:7e:70:c4:94:
44:34:55:27:0a:2e:bd:c3:6f:48:78:ba:01:e8:cd:97:73:38:
07:2e:b8:f2:da:68:31:3c:71:50:ed:64:60:84:9d:a8:ea:63:
d7:56:1e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:33:27 2025 by rpki-client