Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
File: CfsxNuzV49fPALMsEh8S6K_QpgE.cer (raw, json)
Hash identifier: BxP4M/g9eEuzOivNjuSnRLuKPbVqcs3F18IM4Ueu6SI=
Subject key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1688
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:47:26 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 66.251.128.0/18
IP: 169.255.32.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5768 (0x1688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:47:26 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3659F9CAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:89:d5:bf:77:82:5f:d6:32:2b:9c:4a:1c:c5:
7f:2a:7a:53:c4:fd:23:91:ef:7d:9c:b9:85:2c:e9:
d9:16:64:30:14:e0:bb:39:85:40:d6:5d:23:e9:ed:
9a:13:74:20:71:86:b0:19:a8:50:c0:56:c0:1e:bf:
3b:8e:af:ea:53:e5:17:d9:0a:b1:36:3f:40:90:2d:
a7:a5:1a:a0:4b:66:b1:1a:89:1b:ea:e3:ff:c2:ae:
74:68:7e:19:86:2e:3d:c9:4d:f4:f7:90:3e:b4:a4:
ec:91:31:93:f8:5b:14:ea:c8:b7:1d:fa:ba:13:cd:
61:15:b3:fc:1f:da:ad:42:ae:5d:ec:33:54:43:d3:
bd:75:38:1c:dd:be:62:ce:01:55:81:3e:c5:6e:c8:
a1:61:70:0c:fc:b4:15:24:63:37:37:df:51:d5:f5:
60:23:ed:22:78:fb:e8:ed:63:be:27:2b:4d:6c:ad:
4f:6a:75:5a:22:20:94:e7:2d:b7:62:27:63:b7:9e:
97:99:5b:a9:94:f8:fb:ae:5e:33:c0:b3:84:65:96:
bd:53:27:93:29:e8:9b:c3:54:7a:e5:8f:9a:b5:79:
18:4b:f2:8b:e5:b2:78:d3:5a:a1:6c:96:01:dd:3f:
0a:6b:66:0b:14:c8:8d:a2:20:7f:e8:e1:67:0b:a0:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
sbgp-ipAddrBlock: critical
IPv4:
66.251.128.0/18
169.255.32.0/22
Signature Algorithm: sha256WithRSAEncryption
56:b9:15:55:7a:7d:a2:2d:d5:af:ec:4d:dd:c1:e0:51:b1:d8:
ed:b6:63:64:36:48:32:64:fb:38:f6:e2:f1:f4:29:3c:10:db:
8a:37:5c:20:91:ea:5c:b7:cb:95:6a:0c:61:f4:5e:33:d9:5e:
07:b7:8b:d8:53:54:09:c3:c4:fa:16:f3:1d:f5:33:3c:f2:8f:
1d:cd:bf:7f:07:e5:0c:66:fa:35:ce:59:48:a3:93:e0:d6:71:
13:4e:a0:37:75:4b:f0:50:0b:ce:98:40:86:66:cf:c9:45:78:
01:0e:47:46:35:d1:86:43:04:8e:86:8d:81:61:e4:46:6e:64:
1e:54:e2:94:1a:d7:ac:32:10:7d:b1:2a:89:56:a0:df:d2:87:
28:93:b4:ee:37:ba:26:a1:22:38:c5:9c:e0:a6:02:b8:d1:a9:
4e:1d:7d:3e:76:8a:ed:e3:c0:31:39:49:71:d1:b1:36:20:66:
a3:a9:84:0e:c9:05:85:74:f9:86:fa:af:5e:2c:cb:e9:22:98:
16:7c:5d:6f:4b:da:a1:35:df:c4:da:78:5d:71:d4:ed:14:9c:
a5:39:05:34:24:51:4a:45:a7:c4:a8:35:da:d8:22:46:02:b7:
70:f0:c9:0d:d6:9e:d7:28:2c:75:77:f2:f9:38:66:db:3c:42:
e5:da:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:29:14 2025 by rpki-client