Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
File: snY9UExa-ft12a62ByQi-Hoaa_Y.cer (raw, json)
Hash identifier: v74BRSWeuqrwuzhifn1Yun1jfFhpJmiy4vfUjQ2UHqY=
Subject key identifier: B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 33BD
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 06:24:50 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37087
IP: 41.191.96.0/22
IP: 196.50.28.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13245 (0x33bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 06:24:50 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FC75CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:1e:05:a0:61:be:8e:ef:97:5b:43:fd:82:
fc:1b:4f:0d:19:47:97:a8:91:19:45:5a:da:c8:11:
47:44:28:e8:dc:64:66:21:01:4b:63:d0:69:c7:3e:
97:64:6a:2b:50:31:f4:02:10:bd:7f:53:0c:ae:31:
0d:9e:8e:21:b2:9b:8b:79:bc:9d:a6:e3:37:02:17:
f5:77:9b:a4:2f:e2:5b:7e:41:cc:2f:eb:fa:ff:b8:
dc:17:ce:44:4d:8c:61:d0:fb:94:64:96:f4:4a:d4:
22:4d:ac:77:46:dc:7a:8c:ae:07:f0:9f:d5:e0:a7:
c8:19:93:07:b3:1b:0c:a5:cd:90:d7:5d:20:0e:54:
50:7c:a5:37:2c:62:d5:3a:22:be:84:05:a2:13:9f:
2a:71:d4:4e:e9:e2:92:ef:2a:17:57:c0:f3:9c:df:
6a:9c:69:3a:00:b3:ee:78:bc:ee:04:36:f2:1f:a2:
e8:d5:a4:76:38:de:63:46:39:f9:a8:11:f4:2d:c1:
1f:bb:03:e9:9b:85:3b:ee:7e:ca:bb:e1:59:fd:36:
7e:9c:9a:f7:be:2d:10:49:2e:19:30:14:8c:5e:18:
92:c0:b9:24:b3:48:58:36:54:4e:0a:c5:d0:c9:7f:
fb:47:f5:67:69:53:5c:6a:e3:d8:13:b6:00:53:0b:
1a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37087
sbgp-ipAddrBlock: critical
IPv4:
41.191.96.0/22
196.50.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:63:e3:b7:09:86:07:86:73:b9:7c:df:b1:6e:1c:d2:c4:ff:
0f:8b:af:fa:ee:62:4c:70:72:1d:11:e9:e7:d9:ab:77:44:21:
59:79:4e:63:40:3d:ff:19:bc:c0:6c:7d:d6:ec:b5:97:c3:09:
58:c3:fd:22:4a:cf:62:78:f2:08:39:56:eb:4a:b0:93:d7:b9:
de:c5:97:72:83:ec:00:b7:d6:be:cc:8d:b4:a5:00:7b:16:ae:
2e:11:3a:07:e6:ec:01:50:76:43:f2:34:38:92:f8:d1:0c:27:
d2:ff:9e:5a:41:4d:87:f4:8f:7f:4e:cb:63:0f:e1:a5:90:8e:
97:a1:3d:de:f5:e5:79:25:5b:b0:78:a1:c1:04:6b:51:6a:57:
9f:b2:ea:25:9a:76:3e:0a:be:ed:1e:f1:ed:bd:b4:dc:11:78:
d5:ce:5a:70:23:41:da:04:2c:39:61:77:47:8e:21:e5:26:25:
1d:7c:b3:5c:49:c3:61:42:79:85:02:e6:fb:d7:e0:21:39:5b:
b4:f0:b5:16:9f:8e:93:95:5c:a6:25:36:a5:18:b8:50:d8:2e:
e2:32:6a:00:b4:00:8d:41:7f:6c:7e:91:5e:11:1f:0d:ba:07:
f6:78:6e:72:47:71:a1:d0:71:02:7a:88:66:cd:9e:e4:d2:87:
cc:b4:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:42 2025 by rpki-client