Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
File: z9HOEVgucPjVG3hwclwV72fgxlE.cer (raw, json)
Hash identifier: ihbTHSGdvHLSv+bO7ZrLARiVL2mD0qrvsOqlnO/qZTw=
Subject key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DF1
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:10:19 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37538
IP: 41.207.232.0/22
IP: 154.72.240.0/20
IP: 2c0f:f8e0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11761 (0x2df1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:10:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36DB4B4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:0c:6c:ec:f8:09:29:3f:9e:56:b4:d7:f6:
c2:48:4b:fd:89:25:fa:f7:a1:55:7b:69:4c:70:54:
14:08:68:dc:4d:34:3b:6b:57:8e:be:6b:bb:13:34:
d0:90:44:0d:8b:7f:52:6a:48:95:11:09:93:76:f3:
5e:f4:91:e7:88:f0:78:95:77:a7:ec:d5:4a:40:58:
3e:3f:9c:d3:d2:0f:c5:44:6f:37:44:04:0e:ee:5e:
35:cf:b5:1c:12:0c:ba:8c:d8:28:16:e8:ce:60:17:
ee:e7:27:fe:63:cd:73:87:b2:44:ab:a5:70:9b:2c:
e6:48:b1:68:da:a1:9b:f9:b4:70:e4:d3:31:15:ad:
e3:74:17:93:03:64:ae:fe:25:32:97:92:ac:12:d7:
ae:c3:6a:f6:0a:ee:d4:c6:14:da:bf:4b:2e:d8:1f:
e6:4a:b4:de:eb:e9:2c:75:f7:6d:e8:81:ec:45:dd:
4a:90:f3:61:cb:2e:21:26:49:7e:e9:42:1a:72:74:
de:3d:a4:18:49:eb:66:f3:95:f0:2a:96:5b:83:d8:
a0:a8:0d:79:3a:08:47:1b:6a:7b:ba:38:14:95:4f:
9d:23:5e:df:29:c2:43:c2:87:75:47:96:1c:9d:3d:
ba:0f:16:f1:54:e9:58:11:33:bc:6c:1b:c4:a6:d5:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37538
sbgp-ipAddrBlock: critical
IPv4:
41.207.232.0/22
154.72.240.0/20
IPv6:
2c0f:f8e0::/32
Signature Algorithm: sha256WithRSAEncryption
13:ff:27:6b:6c:be:91:1c:bd:77:d6:ae:3f:56:d5:5a:57:79:
15:59:92:df:00:9c:ae:ef:e4:89:67:82:14:48:64:3a:a9:10:
a6:70:e3:7c:21:53:26:57:c4:f3:04:0d:83:b4:2b:68:42:3d:
e7:0d:1a:d8:0a:ba:e3:1a:51:c5:7b:b0:2a:eb:33:09:60:8c:
f1:bb:45:11:e5:40:56:81:31:a8:09:20:37:0d:c9:70:7f:cb:
db:1f:51:a7:fd:9c:1d:04:14:af:93:b6:dc:03:86:f3:85:03:
b0:de:3c:4d:94:3f:3b:86:f5:36:02:b0:87:9c:6e:47:21:a1:
09:e6:7a:20:78:8d:97:74:3d:c5:65:08:71:45:c6:65:4b:15:
a8:52:85:14:cf:b6:a2:62:af:40:93:90:6f:ba:bf:af:dd:d0:
55:6e:bb:d0:df:46:4b:45:06:0a:2f:d2:c5:3e:0f:53:34:e6:
5b:35:dd:16:c8:aa:2f:62:a4:51:e8:4e:fa:d3:ce:9a:8b:2c:
6b:e3:9a:5e:a3:4c:1a:bf:14:14:aa:63:0d:02:f1:a4:2e:00:
1d:dd:79:57:08:aa:ef:d7:39:22:4f:27:eb:42:cd:b5:09:7d:
a4:96:b3:6b:bf:f3:9e:27:69:51:cd:fa:a4:af:3a:87:0d:47:
b4:1b:08:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:54:19 2025 by rpki-client