Certificate

$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/rEc2hFFVfq7mq67gTDqYInepnd4.cer
File:                     rEc2hFFVfq7mq67gTDqYInepnd4.cer (raw, json)
Hash identifier:          TKgVNzo+e9RnVNar+xLRBTnuAOL86WO/HZ57ddjv5ps=
Subject key identifier:   AC:47:36:84:51:55:7E:AE:E6:AB:AE:E0:4C:3A:98:22:77:A9:9D:DE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer:       /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial:       23AE
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest:                 rsync://rpki.afrinic.net/repository/member_repository/F362A54C/D09A0B0C531711EEBF6933284AD9E6FC/rEc2hFFVfq7mq67gTDqYInepnd4.mft
caRepository:             rsync://rpki.afrinic.net/repository/member_repository/F362A54C/D09A0B0C531711EEBF6933284AD9E6FC/
Notify URL:               https://rrdp.afrinic.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 00:45:51 +0000
Certificate not after:    Mon 31 Mar 2025 00:00:00 +0000
Subordinate resources:    AS: 328368
                          IP: 102.131.40.0/21
                          IP: 2c0f:efa8::/32

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 00:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9134 (0x23ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
        Validity
            Not Before: Jan  1 00:45:51 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=F362A54CAF/serialNumber=AC47368451557EAEE6ABAEE04C3A982277A99DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e0:c7:8f:1c:84:ae:6c:d9:ec:cf:25:9b:f7:
                    51:a3:ec:15:78:13:08:aa:67:41:a7:01:2e:37:5d:
                    c7:b0:50:27:70:f3:1e:f4:d6:60:0e:57:5b:67:6d:
                    12:ad:61:68:fe:60:d8:de:f7:78:b1:8d:7a:e1:2c:
                    db:88:b7:65:52:84:a4:60:8e:4d:b9:0d:91:9f:47:
                    76:cd:2e:d4:37:db:26:35:23:f1:33:39:05:92:49:
                    b8:db:ee:70:24:ce:10:6c:47:bb:fb:85:b5:e5:37:
                    88:14:5c:9c:86:60:b6:8a:d0:8f:3b:55:86:8a:01:
                    9d:b2:75:73:fd:51:65:db:83:15:fd:6e:2d:5b:20:
                    c4:89:5b:db:fe:8c:14:c7:98:b7:01:7b:1f:07:cb:
                    2c:38:b8:18:8f:a8:5e:92:36:90:85:d8:a7:38:4b:
                    34:88:b1:e4:07:67:f5:34:ff:73:66:49:d3:7d:d0:
                    c1:4f:de:b5:ac:09:08:3b:97:c3:a9:7c:9b:c4:7a:
                    8b:0e:8f:ac:92:f1:35:41:ad:b9:b9:23:b0:ec:1a:
                    3c:f3:5a:79:83:48:52:6f:1c:4d:03:88:fa:af:36:
                    c4:4f:69:02:e3:4e:dd:70:de:a5:27:5b:fc:1c:33:
                    c3:41:2f:9d:08:ab:5a:81:d3:70:ff:2c:03:11:c3:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:47:36:84:51:55:7E:AE:E6:AB:AE:E0:4C:3A:98:22:77:A9:9D:DE
            X509v3 Authority Key Identifier:
                keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A54C/D09A0B0C531711EEBF6933284AD9E6FC/
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A54C/D09A0B0C531711EEBF6933284AD9E6FC/rEc2hFFVfq7mq67gTDqYInepnd4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  328368

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.131.40.0/21
                IPv6:
                  2c0f:efa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:71:01:95:6e:9c:b4:4d:29:48:4f:fd:fb:77:e2:6c:93:e9:
         8c:08:6c:dc:6f:03:8c:ed:0f:c4:81:c2:8b:c1:38:af:11:cb:
         d1:ec:f9:01:62:02:77:54:1a:20:e3:70:07:66:10:97:38:58:
         72:55:98:d5:86:1a:41:99:35:05:38:0e:a7:9a:2c:98:dd:b5:
         6e:4b:0e:1a:3b:f6:6f:bb:40:42:cd:6a:c6:3c:49:05:35:90:
         67:fc:58:06:81:99:13:7f:ec:a8:cf:8b:af:cc:81:8d:23:2c:
         b0:aa:08:0b:ae:33:07:6b:34:0a:43:a2:0f:b1:1c:d6:7c:38:
         bb:6e:8a:a0:d5:b7:d8:64:39:2b:c7:2c:46:48:c3:7c:ff:19:
         19:07:2f:ea:96:7e:cb:ce:5c:72:44:2c:77:cc:1e:09:fb:6a:
         64:d2:a0:42:40:ef:5f:5f:d1:00:8b:5b:11:43:f9:e3:18:92:
         20:f2:bd:5f:f8:57:46:64:8c:2f:c6:5d:1c:84:6f:19:9c:1b:
         59:20:a5:28:b5:56:45:f9:84:b1:5f:25:c3:1b:03:f9:7b:69:
         1f:50:b4:66:6f:f0:ee:f1:61:94:fb:f5:eb:67:2c:d3:6f:3d:
         2a:43:bc:f4:73:63:1d:e1:14:85:49:3b:8b:4a:f7:74:bb:e1:
         63:5b:84:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 01:12:03 2024 by rpki-client on console-fra.rpki-client.org