Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
File: kGRTy4rcpLXHpuU7LsUREsTH_iw.cer (raw, json)
Hash identifier: 6uP1lgUHUpqu8G7/Pk3hRpszPVy9cE51hhCNi5xmdwI=
Subject key identifier: 90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 31CF
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:34:17 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37154
IP: 41.72.96.0/19
IP: 2c0f:fcc8::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12751 (0x31cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:34:17 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F9BF2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:e4:02:8f:18:aa:f4:f7:fa:e2:a8:e8:dd:
86:e5:ae:f2:3a:8e:b6:2e:3e:74:f9:53:84:98:dd:
37:bc:dd:b8:7d:78:60:c0:35:4f:be:7b:e0:8d:d0:
76:2a:95:9a:62:b7:aa:dd:14:41:65:6a:b6:ef:77:
cb:a1:6c:1b:05:a1:2e:47:5a:f6:20:9c:06:31:f8:
e4:ca:9b:ea:4b:15:9c:2b:5d:45:01:9b:63:ea:fd:
f9:2f:05:25:30:cc:79:a3:aa:73:a3:2b:64:16:90:
2f:cd:54:05:a4:6b:05:12:9f:4c:73:13:c7:4a:1c:
5c:e5:ef:4f:85:20:91:e5:d4:bf:3e:d0:16:44:95:
aa:c9:2e:43:fc:02:48:13:c5:4e:64:88:bb:34:18:
12:46:57:49:e5:cc:e3:97:0c:af:8e:e9:7a:75:af:
e2:25:20:c4:ac:c6:13:c4:ac:e4:b0:72:bf:6d:99:
ad:8a:6c:fc:09:8c:05:5d:e2:06:36:c9:85:47:bf:
7f:7b:e7:3f:7b:e6:07:fd:8c:27:77:97:ab:fe:f2:
31:1d:2a:e0:f7:72:04:93:61:7a:e9:bc:2b:9a:f3:
98:06:85:73:c2:f7:a7:d0:3f:16:eb:14:86:6d:36:
c3:17:83:0c:21:41:4f:01:74:ba:03:b9:0c:27:d0:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37154
sbgp-ipAddrBlock: critical
IPv4:
41.72.96.0/19
IPv6:
2c0f:fcc8::/32
Signature Algorithm: sha256WithRSAEncryption
c5:83:85:36:db:95:29:44:89:c5:6b:07:9a:bc:a4:e2:04:ad:
f5:2d:65:ea:73:76:36:f7:ea:dd:96:dc:79:22:ff:b6:1b:7a:
31:47:9f:c8:ab:a4:8d:89:23:ad:af:ca:65:dc:5c:9f:dc:1f:
6c:89:75:6e:00:ec:75:0d:01:5c:23:94:82:8e:8b:86:d3:a5:
3c:d8:21:ae:27:10:1e:a1:06:43:ec:e1:07:28:aa:89:f8:4a:
6e:1c:e8:6e:ea:a1:fa:1c:31:32:ec:19:da:3d:e1:c2:b4:08:
2c:af:65:9c:24:66:0c:65:23:d7:47:cf:48:5e:48:be:9c:94:
a5:68:27:32:b3:e0:cc:fa:47:b5:fb:df:46:6a:44:59:34:81:
d4:1a:8f:45:7f:72:34:c7:e3:6b:08:5c:df:b1:05:8b:86:30:
8c:9d:51:97:08:25:42:fb:81:80:06:40:56:24:c4:68:84:05:
f2:a1:ab:65:56:dd:dc:df:e7:b4:58:88:4a:6c:66:1f:74:ec:
97:5a:bd:88:65:2a:3f:3a:05:ad:ee:35:66:4c:74:95:da:32:
94:d6:98:d0:72:b7:82:71:af:6d:04:92:2b:35:f8:33:ff:4d:
d4:22:93:0c:24:45:69:b2:ca:87:00:d7:ee:7a:9a:1e:50:be:
07:a4:88:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:43:57 2025 by rpki-client