Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
File: yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer (raw, json)
Hash identifier: Y5Lmhmoe9geFThpB1ZUSqIGhr4PZoOZNB7SbQAmbGHw=
Subject key identifier: C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3285
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:13:16 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329099
IP: 102.216.236.0/23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12933 (0x3285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:13:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36C38D9AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:8a:0f:0b:67:f4:18:47:75:d8:e0:c1:71:
73:c9:d4:1e:26:16:4d:27:6a:92:84:c2:53:d5:87:
e6:23:70:df:45:5b:78:4c:85:63:45:5b:f0:f8:df:
7f:a5:82:5b:9c:52:12:af:c3:8b:df:85:2a:d5:06:
54:cb:8a:48:42:5a:16:df:15:a3:48:b2:f9:62:80:
0d:f1:22:c7:8e:73:36:0b:21:6a:b0:a5:16:21:14:
0a:87:56:98:6f:63:6c:90:50:a8:ea:5e:9b:72:b7:
7e:95:a0:bc:97:a0:ee:97:af:6e:1e:7c:17:f1:ac:
e6:86:5f:f7:92:c2:84:6c:e7:e3:6a:db:b6:97:46:
5b:09:5b:1b:34:a4:58:93:7a:09:58:f8:ab:85:9d:
ec:24:b2:c0:08:17:1d:17:e5:37:63:e1:13:50:68:
12:60:35:13:01:cb:82:27:e8:2c:a9:c7:21:e0:78:
96:d1:f5:0d:4e:e7:5a:02:8e:eb:34:e0:85:0e:23:
8b:b9:72:64:d3:d7:09:77:04:51:d6:8f:f5:8b:ae:
1a:94:8a:ad:97:3a:4b:06:4a:fe:80:85:10:48:dd:
51:cf:44:5b:61:0c:38:c6:c0:19:13:d7:1a:3d:ee:
37:a7:20:a5:46:02:21:da:95:0e:be:05:e5:f9:bb:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329099
sbgp-ipAddrBlock: critical
IPv4:
102.216.236.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:89:30:77:2a:f6:4f:f1:26:4d:c8:37:0c:43:1c:2e:0b:ac:
0b:e4:3c:6a:68:9c:4a:af:b0:cb:a8:5b:8c:61:d1:e3:e1:05:
39:b8:8b:f6:a6:23:89:09:cc:b6:07:df:31:83:ed:dc:da:fd:
61:bb:2a:80:0a:0f:fa:c5:61:5e:d5:06:7f:03:50:f8:46:d8:
29:7b:e7:d1:b7:ae:1f:6b:6f:0a:6e:2f:10:4b:ff:9d:21:78:
60:57:f6:be:5e:35:e5:be:f1:e1:3b:22:80:98:36:39:d5:a3:
37:4c:2f:4f:8d:89:72:5a:0c:28:5c:dc:76:dc:d5:2f:4a:ca:
89:8c:bf:7d:9a:29:8c:a5:aa:0c:f5:29:cb:e4:b5:20:50:bc:
db:b2:06:28:36:a9:39:1e:dc:c9:db:56:0a:f1:e8:b1:6c:eb:
a8:ee:88:1c:1d:6e:65:9a:c6:7e:83:12:9b:93:97:1c:56:1b:
d9:c2:b5:6c:60:cc:a6:e0:b4:e0:d4:4f:34:50:11:46:e6:88:
60:1c:f6:82:fa:f4:05:7c:74:a7:65:25:e9:35:21:bf:b2:6b:
f0:6f:47:d7:04:3c:c0:ff:ad:d8:5e:6d:df:5e:c3:ff:90:bc:
fb:6e:1d:87:2b:c5:f3:79:1a:34:8e:7d:a7:85:38:97:b2:6c:
ef:eb:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:38:28 2025 by rpki-client