Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
File: x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer (raw, json)
Hash identifier: LGnjtGLb+95JvLQJpid9yTeqOrn0ehOI7uVBc1+ObDs=
Subject key identifier: C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DE5
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:07:44 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328233
IP: 102.207.221.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11749 (0x2de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:07:44 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36390A9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:75:fd:3d:c6:c0:20:96:18:4e:a6:7d:70:
af:69:fe:16:3b:1f:66:90:43:64:7c:38:15:aa:23:
d8:93:c9:d0:80:be:fc:00:8f:25:e5:19:f0:40:f0:
70:cd:5a:a5:22:cf:e5:7f:78:b1:74:43:33:f1:b8:
49:0d:37:93:6d:42:a2:6f:ca:82:00:40:29:aa:b5:
8b:fe:af:28:bf:2a:10:4b:84:e4:12:cb:9a:5e:44:
c6:b3:88:82:d7:e5:d7:bf:6d:e4:a7:c5:fa:a3:a9:
f5:6c:e8:91:3d:f9:dc:c2:9d:cb:d6:2b:cf:09:22:
f6:7a:9a:55:c3:45:6b:f1:ba:bc:2a:41:6c:dd:6d:
9b:14:7d:20:89:fe:e7:c5:d5:55:b4:bf:73:f9:0d:
d9:87:6c:c8:dc:da:2d:a8:34:c4:9e:61:cb:85:b2:
26:4f:ed:9a:49:db:a8:13:97:96:8e:bf:c5:f8:f7:
88:16:d1:ac:b5:2a:47:d7:07:7c:36:0f:5b:92:86:
ac:72:0d:a3:61:e8:e0:d5:08:3c:08:c3:b0:43:c8:
1e:7b:fe:6c:1b:c8:e3:7f:9c:51:fa:3c:ad:28:9d:
e7:16:53:5d:64:4a:8f:d9:ef:f1:e7:18:20:c0:3f:
b0:d7:18:e3:d7:01:3f:72:b4:52:91:d1:14:9d:b5:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328233
sbgp-ipAddrBlock: critical
IPv4:
102.207.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:46:cf:1b:08:3b:e8:7f:b3:c2:75:8f:51:40:9e:95:08:8d:
92:43:e5:a2:73:c9:1e:d8:8c:f3:be:ef:0e:9c:c7:d0:ca:5b:
b6:81:c4:5c:7e:56:48:fb:d7:68:d4:39:34:20:e9:d5:b7:d0:
bf:81:94:ec:68:5f:8b:60:0a:61:e2:23:7c:83:a4:50:34:94:
76:b3:3d:ff:8c:0d:83:38:d6:89:97:44:11:7a:4d:e1:04:9b:
ae:1c:b1:1a:7e:96:fc:ed:dc:08:90:cd:04:57:b9:f5:77:23:
40:b5:7f:58:b5:a2:a2:de:bd:ed:3d:d3:21:5b:26:2c:10:f0:
4b:81:54:71:89:9b:d8:e5:41:3b:01:68:46:f3:a3:69:c8:64:
7b:2c:87:0b:2c:c7:19:7b:7c:11:8d:9b:dc:67:d7:25:35:29:
81:31:ee:31:04:74:9d:13:e3:04:f9:2b:b6:c8:bd:dd:ce:3b:
ff:e0:56:57:92:93:41:e5:a3:4f:17:8b:6e:47:37:4c:5f:8c:
c1:7f:fb:ce:de:01:58:d6:37:fd:c7:7b:04:ea:ff:3c:7b:0d:
d8:b0:8c:1a:7a:16:3c:9e:c8:e9:5f:c0:a3:bb:8d:63:4e:06:
00:be:9f:a7:5a:10:51:73:17:1f:08:27:45:fd:6f:ee:c7:6e:
05:6a:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:17 2025 by rpki-client