Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
File: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer (raw, json)
Hash identifier: X0rwPtxf6jOxAlH4SxsmS16/AEx3acu0gf+kZ9cxzH4=
Subject key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 330A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:42:27 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328619
IP: 2c0f:1f40::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13066 (0x330a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:42:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36DA96DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:e7:bd:5e:b4:1c:b6:8e:10:26:48:0e:e0:
05:06:8a:d2:a0:59:49:31:bf:a8:8f:45:da:8a:7c:
ad:d2:4b:d4:5c:17:b7:c9:63:c1:21:75:35:f9:c7:
18:0f:52:5c:6f:70:40:47:0c:3e:08:d3:70:38:40:
30:13:ce:00:42:b0:cb:80:56:5c:bf:12:b2:4b:88:
85:0b:0d:3e:c4:77:7c:65:f8:1d:b2:ec:df:de:f4:
11:ba:38:bd:f9:3b:38:24:e1:31:a7:93:1d:55:2d:
69:1a:c6:7f:b3:c8:29:cc:aa:12:d4:c6:4f:04:42:
25:43:60:01:cc:2e:fe:f6:61:dd:84:08:68:71:82:
4a:bc:bb:15:78:83:68:eb:e4:f8:d4:d7:25:50:48:
ff:8c:0a:17:37:24:47:6a:ac:b6:b8:6f:07:c1:be:
71:01:f4:91:2b:c0:67:71:93:a6:e8:76:02:5c:87:
e9:2b:0c:7c:c0:09:28:77:19:83:1a:be:d1:3a:5f:
cd:f1:f7:6b:52:17:72:b0:7b:24:75:d4:7c:aa:20:
c0:a5:ed:73:68:53:d2:cf:3f:a6:69:eb:24:7c:cb:
82:0b:20:1f:3e:1f:f6:f1:4e:13:dd:1d:10:0e:6b:
05:ed:56:f9:d8:b1:87:ac:ea:3d:5e:e2:8d:2d:21:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328619
sbgp-ipAddrBlock: critical
IPv6:
2c0f:1f40::/32
Signature Algorithm: sha256WithRSAEncryption
21:5e:68:dc:c0:f4:8a:85:3c:af:7c:2b:80:81:a1:e1:ee:14:
08:53:60:0c:82:a5:52:b6:a9:90:68:39:28:32:2d:b3:2d:c7:
1d:59:3e:d2:eb:4f:0d:6f:74:63:7a:9a:a3:fa:bc:57:24:df:
0d:d3:af:c8:5b:d4:31:1b:5d:64:68:7f:08:24:ce:cb:ad:16:
a7:ac:8a:7f:b4:8e:30:2a:ba:49:98:26:53:34:07:a3:9b:ff:
7b:a0:b0:e1:96:ce:5f:b8:ad:9e:80:bc:5b:a1:b4:95:b1:67:
96:b9:16:7f:42:d7:32:8e:8a:a2:17:bf:70:f1:26:a8:a0:b3:
86:09:62:3d:ca:9e:05:35:5f:6e:7d:a4:90:7c:58:43:43:d4:
29:e5:43:0d:8e:f3:19:e3:86:01:ce:27:07:34:71:36:0c:08:
31:a4:75:17:9f:db:87:a8:d2:38:56:77:30:ef:6c:5b:9b:1f:
04:5e:ea:ca:83:cd:e6:4f:d4:7f:be:a4:a5:50:5d:22:53:ce:
1c:3e:53:1a:e6:49:17:f4:0f:be:bc:76:b4:21:6e:c9:33:4f:
c6:48:03:14:9c:c4:c7:a6:99:78:1c:4a:31:97:24:a3:68:a5:
b3:4a:2f:d6:74:45:a5:b6:36:0c:72:fb:d0:a9:52:22:c5:38:
b0:6f:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:28:43 2025 by rpki-client