Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/5vz7Am63dRX-jOZ3NMPehbNHlM4.cer
File: 5vz7Am63dRX-jOZ3NMPehbNHlM4.cer (raw, json)
Hash identifier: 1Y74ZPzyjMFI7FvoSvy6ynI7Hu20nagtRpdPQkmnqUA=
Subject key identifier: E6:FC:FB:02:6E:B7:75:15:FE:8C:E6:77:34:C3:DE:85:B3:47:94:CE
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 166E
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364B494/21A3A3DC329411EDBA0A1CA5F1222468/5vz7Am63dRX-jOZ3NMPehbNHlM4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364B494/21A3A3DC329411EDBA0A1CA5F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:42:21 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 169.255.168.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5742 (0x166e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:42:21 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F364B494AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:ef:09:0e:a0:90:42:fc:cc:73:c5:0e:de:
7c:de:d5:63:30:32:63:15:e1:e2:5f:3d:eb:16:f3:
1b:11:0e:b5:79:8c:d3:d4:a8:d7:f4:5f:7d:2c:f0:
74:ce:95:3a:c7:0d:96:8c:41:76:d6:7d:85:6d:e8:
7d:d9:70:ab:4e:01:48:5a:22:ad:02:9d:7a:2b:96:
b9:46:e4:59:7c:d1:85:24:1e:ac:f4:82:09:01:9f:
92:b5:4c:36:ae:b0:f9:ba:43:3b:5f:fa:47:73:bf:
ff:17:b1:97:e3:56:5f:88:12:ca:d6:8f:35:14:2a:
3a:a8:0b:cd:93:e8:22:ed:af:88:65:7c:55:e3:ce:
9a:ca:51:bf:bd:6d:35:4e:7f:2e:4d:7a:18:f2:fb:
62:7c:ea:fa:be:3a:a4:b3:64:a3:3d:c1:39:d2:5c:
50:88:46:0e:96:05:d3:72:61:a8:df:71:c4:7d:d5:
19:6e:cd:dd:97:20:17:b4:05:e2:80:4c:f9:da:7c:
7e:76:de:c5:1a:16:61:6d:81:ed:70:ad:4c:13:9c:
78:84:b6:ab:06:13:1f:16:76:95:9f:64:a9:c1:39:
52:ed:bf:f5:0c:c2:b8:8f:05:05:1e:e1:3b:10:59:
bc:a6:eb:3e:e2:e6:5c:19:84:30:93:47:dc:f0:d8:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FC:FB:02:6E:B7:75:15:FE:8C:E6:77:34:C3:DE:85:B3:47:94:CE
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/21A3A3DC329411EDBA0A1CA5F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/21A3A3DC329411EDBA0A1CA5F1222468/5vz7Am63dRX-jOZ3NMPehbNHlM4.mft
sbgp-ipAddrBlock: critical
IPv4:
169.255.168.0/22
Signature Algorithm: sha256WithRSAEncryption
90:c9:dd:da:7f:12:b7:3c:eb:ab:e8:07:d9:e0:70:29:85:79:
6c:a0:f6:18:3c:de:4a:70:7c:f0:01:45:04:93:f5:4d:08:3b:
33:69:f9:32:88:0a:0e:1a:22:5a:56:2c:e7:8a:07:b0:94:2b:
61:e8:94:ef:ea:16:2e:12:81:fb:ee:a4:55:5d:0e:cf:2a:55:
4e:c6:82:07:0e:8a:8e:ad:4b:9a:aa:57:4e:e5:0f:51:01:ee:
21:4f:f7:66:0e:f8:07:c1:0f:62:c8:2c:29:9f:8e:ac:3f:6d:
af:e0:ca:17:54:7f:d4:c6:00:d0:9a:85:c3:be:8d:e8:dd:65:
a6:e8:bf:16:55:c6:37:4e:48:5b:1e:55:8c:60:f7:a6:cf:ac:
bc:e4:a3:0e:85:dc:c1:b1:e8:99:49:4d:cb:04:51:39:72:6c:
8c:73:93:ec:19:f7:d1:b7:75:56:ea:33:db:45:ac:ba:96:e2:
06:73:ae:da:a5:a4:0c:98:ab:5a:b5:e9:42:4e:28:f9:84:ac:
cf:99:0c:43:41:c3:d3:69:33:f3:28:ac:50:d3:a5:47:94:23:
42:3c:37:8e:14:11:bc:b8:80:6a:26:8f:0c:f7:74:38:88:ac:
cc:8d:23:4e:0e:88:6b:da:c2:41:cb:35:ba:29:24:a3:19:c1:
f9:66:20:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:40 2025 by rpki-client