Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/m2alk7NXauyLeoxnrfp6kgsUOag.cer
File:                     m2alk7NXauyLeoxnrfp6kgsUOag.cer (raw, json)
Hash identifier:          Zd2zMJCBoa6kPVeXvoXvdYKgqA+yyg3bSOMAr2N5ZV4=
Subject key identifier:   9B:66:A5:93:B3:57:6A:EC:8B:7A:8C:67:AD:FA:7A:92:0B:14:39:A8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       2A61
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/m2alk7NXauyLeoxnrfp6kgsUOag.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Fri 07 Jun 2024 00:04:32 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328427
                          IP: 102.68.136.0/22

Validation:               Failed, certificate revoked on Fri 07 Jun 2024 03:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10849 (0x2a61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jun  7 00:04:32 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F36FE1EAAF/serialNumber=9B66A593B3576AEC8B7A8C67ADFA7A920B1439A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:1c:18:4e:1d:b5:61:21:8b:cc:c7:a4:df:
                    87:44:ae:09:4e:65:6c:8e:cb:76:d5:c8:9c:08:94:
                    49:e6:45:04:68:aa:96:38:30:ca:3a:db:ce:35:be:
                    9b:45:1e:73:69:b3:5b:1b:c7:9e:08:3b:8d:ff:85:
                    2c:4b:f3:2d:5f:b7:96:41:8d:da:9a:48:a6:9f:3e:
                    8b:11:51:ec:27:55:99:f5:fe:1a:56:ba:26:b7:39:
                    a9:ff:79:73:bc:0b:40:a9:c4:9f:73:90:df:10:9a:
                    61:61:21:2f:bd:a5:9a:14:51:ef:bd:53:5d:1f:d5:
                    c7:7e:07:83:22:c4:5e:c4:9b:c4:67:9a:57:ee:a7:
                    70:6f:52:50:92:09:36:0a:02:13:94:6f:4e:0d:8a:
                    59:20:da:1e:e0:b5:3e:af:f4:82:7e:6f:ef:b4:74:
                    32:03:5d:ad:15:0e:02:87:7b:a9:60:d1:e4:57:f2:
                    e1:62:c4:1c:cc:e6:80:c8:c3:3d:ec:ae:5c:16:28:
                    96:f9:e6:1c:56:4e:9b:c4:69:d2:84:cc:c0:da:1a:
                    3c:c2:80:11:e7:af:6f:8c:94:6a:89:ea:74:cc:11:
                    4c:af:06:79:ed:de:81:b2:12:6b:c9:53:39:5c:5a:
                    56:be:b1:68:62:eb:d7:2b:f9:76:c3:5d:36:a7:91:
                    2b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:A5:93:B3:57:6A:EC:8B:7A:8C:67:AD:FA:7A:92:0B:14:39:A8
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE1EA/0781C770806F11EEADC9ED584AD9E6FC/m2alk7NXauyLeoxnrfp6kgsUOag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328427

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.68.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:81:d9:22:3c:33:ef:c2:83:d5:db:2e:cc:9c:5e:82:ff:81:
         be:f3:3c:5d:16:fd:06:d7:59:45:b5:b4:6c:c7:42:e0:94:99:
         fb:7f:c1:0b:c5:2f:61:84:4a:b0:9c:fa:d1:50:3d:aa:dc:85:
         06:10:fe:5d:9a:fb:1f:55:16:31:e3:73:6c:dc:d3:ca:57:1f:
         42:70:3f:d9:45:60:a2:5c:31:b5:3b:84:c3:91:12:7a:95:11:
         2c:4d:7e:43:ed:11:76:9b:33:bc:16:9d:75:4e:17:a9:d8:27:
         46:1c:b0:9e:74:aa:ec:15:71:0e:49:80:26:77:a1:cb:2c:a6:
         cd:6f:c8:5b:cf:e7:d3:9c:af:85:5b:1f:2b:10:c0:4c:2f:9d:
         0e:f1:9e:72:08:4c:ef:9d:f4:a7:14:62:a6:3f:c8:aa:c6:0e:
         cf:67:a5:61:7b:7d:e2:92:9d:26:1f:f4:2c:7b:2f:13:db:c4:
         c6:a3:46:38:b8:4c:2e:21:5b:3a:e4:69:c7:8c:05:a2:e1:47:
         90:88:20:f1:5f:e5:a4:ac:df:15:f1:25:39:2e:8c:3c:94:2a:
         c2:50:9e:40:d8:b4:cb:d9:c6:fe:ca:ce:d1:f7:dc:dd:3c:ef:
         b9:27:05:22:d6:d4:c2:40:10:a3:62:4e:e9:03:f9:2a:a7:0a:
         6b:77:46:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 04:10:46 2024 by rpki-client on console-fra.rpki-client.org