Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
File: j29vvKPGNM2_8Exy6bDsgG-YPKg.cer (raw, json)
Hash identifier: ssUMX6LqWFT5ZvIQvmBFQoxLdV/DcZHWjxGHb/1/eh0=
Subject key identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 321C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:50:52 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328533
IP: 102.36.208.0/22
IP: 102.208.72.0/22
IP: 102.214.189.0/24
IP: 102.221.208.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12828 (0x321c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:50:52 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B57DFAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:f7:e4:5e:40:ef:ce:12:4f:ff:78:10:57:
e6:e8:46:10:1f:37:73:20:8a:2b:fa:85:a1:bd:89:
30:54:4e:5b:30:8c:46:3c:58:54:62:7d:15:e9:03:
7f:2d:61:6c:0f:8b:39:0c:a2:43:2d:cb:e7:94:c7:
72:fa:a2:f4:09:3e:65:a0:49:64:7b:dd:78:9f:1d:
48:02:9f:dc:84:05:1c:9c:23:4c:69:43:21:93:82:
b2:cd:ba:55:5c:8a:7b:7f:7b:ce:19:f5:d6:bd:12:
75:b1:d4:63:85:a0:f5:21:41:ce:30:d7:34:87:7b:
44:83:de:c6:38:fc:4f:0c:52:b1:79:8b:82:5a:65:
8f:57:88:45:94:be:4e:3e:27:0e:01:b4:25:11:5d:
08:b8:8c:d0:fc:8f:3b:c0:71:5c:93:9f:a9:81:36:
d9:60:66:d4:e0:fc:fe:67:97:fc:af:d8:40:19:ac:
e8:37:c1:92:2f:8d:16:44:0e:53:4c:72:dd:1a:b4:
0f:04:99:3d:69:24:8f:3e:e1:ec:98:24:37:4d:9f:
13:c6:e7:81:3a:9b:22:7a:c5:eb:d3:ee:02:52:b6:
d8:75:aa:4d:bf:99:cd:64:24:d3:e4:bd:5a:d1:cf:
66:ef:39:5b:84:26:07:c5:7f:02:70:d6:0b:a7:19:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328533
sbgp-ipAddrBlock: critical
IPv4:
102.36.208.0/22
102.208.72.0/22
102.214.189.0/24
102.221.208.0/22
Signature Algorithm: sha256WithRSAEncryption
70:8d:e9:32:48:f6:f6:19:82:3a:4d:8a:47:53:ff:91:e3:3a:
66:29:7c:a9:68:72:cf:c8:de:f1:d4:c3:0b:8d:3c:f8:00:61:
65:17:6f:56:6a:29:20:42:21:2c:aa:11:81:51:63:dd:b9:cc:
0a:56:12:c0:97:04:6a:1a:a8:94:0b:32:60:31:97:6f:e0:87:
bd:66:1d:b6:ef:d3:df:be:c8:55:14:6d:ce:59:dd:bd:db:a1:
cd:4a:b4:25:c8:2c:14:d5:70:dc:bc:48:4c:6e:51:17:a1:48:
47:40:11:79:02:e3:bc:56:d7:04:58:5e:f4:c1:61:84:9e:59:
af:37:3b:bf:d1:45:fe:de:20:9f:2c:44:43:6a:f9:5b:35:79:
32:a1:6f:6a:fb:d1:85:06:87:48:99:17:6e:f0:7f:b1:82:34:
b6:90:56:eb:28:64:85:88:8f:82:c0:39:a4:b8:4f:d6:4f:71:
e1:93:cb:42:c1:d3:0f:90:ac:ee:60:fd:69:28:d2:3e:e9:3d:
bb:95:c6:55:54:0b:a9:e0:96:57:79:35:1a:38:77:13:78:e2:
6d:45:86:10:43:a1:4f:b1:27:4e:99:d7:13:c7:c6:c7:49:df:
6e:60:39:95:4d:71:3f:ba:7c:fa:f2:fd:96:61:e6:66:66:82:
ba:f4:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:52:19 2025 by rpki-client