Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
File: DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer (raw, json)
Hash identifier: aQQ7mC3/2qv1o+VCaQ0Wr61j93FKifz4/lw3fGVjCH0=
Subject key identifier: 0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 168A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:47:51 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 169.239.132.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5770 (0x168a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:47:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F365E03DAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:f6:18:75:4b:be:80:5a:dd:6e:4f:d2:13:
8b:04:7a:0f:35:38:c7:83:74:14:27:3e:1d:74:af:
1e:4b:9a:97:3c:3d:9a:29:af:0a:67:02:62:d0:35:
3c:c4:5d:96:85:96:20:64:a4:55:05:de:3a:93:bc:
a2:e3:bd:e1:48:fc:21:0b:f0:e4:21:0f:80:cd:1b:
cd:81:8c:7b:47:14:9a:64:01:0c:b1:13:87:bf:dc:
2c:31:a1:69:f8:e8:7e:58:77:9d:57:dd:a3:e7:df:
54:34:0e:4c:bf:ee:0b:ce:1e:a2:60:f0:e4:4f:96:
b9:d7:b7:c6:db:4c:33:ca:f8:c9:07:88:45:bc:ea:
61:15:01:3e:69:79:62:9c:93:f7:eb:85:49:14:49:
10:70:bc:17:49:be:61:e5:0d:98:79:47:3e:fb:a4:
ac:12:db:16:f7:e8:e8:af:76:81:61:3d:01:6c:1d:
4c:0d:fd:7f:44:91:01:09:07:24:d9:7c:05:b7:15:
f3:3c:fa:45:74:ea:ef:40:d0:bf:37:75:61:da:26:
ec:09:e1:f5:14:a0:f3:b0:3e:6b:2e:df:7e:da:f4:
be:dd:74:d0:63:9b:96:36:33:c6:66:81:55:ec:ef:
bd:b4:f1:d2:a7:9c:d7:bc:55:36:d0:a7:fb:78:96:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
sbgp-ipAddrBlock: critical
IPv4:
169.239.132.0/22
Signature Algorithm: sha256WithRSAEncryption
99:f1:d1:44:ea:0f:8f:14:d2:4d:9e:9a:6c:0e:6b:d6:52:09:
e0:0e:99:1a:03:6a:d7:83:e4:c5:36:24:7d:dd:2b:59:a9:d1:
c5:ed:5a:62:d6:e2:6d:92:b7:94:10:14:8c:3a:b9:4c:57:27:
64:dd:39:74:ac:41:f4:34:a0:5c:ff:df:77:00:b4:a6:44:ac:
1c:0b:5c:07:93:dd:62:ac:48:a7:0f:3c:6b:28:06:98:a2:ab:
47:30:2b:71:15:f6:be:94:6c:27:7d:ef:ae:74:ae:a0:c9:d4:
da:7b:4e:7f:86:5f:cc:a2:89:ad:95:da:a7:79:6e:5c:8e:21:
70:7a:fd:2f:f6:82:e3:1f:df:7e:6a:00:89:cf:bf:6c:01:1c:
1a:61:82:45:98:00:d3:c7:b2:1d:a8:f7:02:88:5c:5a:41:aa:
22:14:b3:35:31:cd:80:cb:7e:1a:ff:ca:39:53:91:1c:eb:24:
94:b6:c6:5b:81:13:1b:7c:ae:5d:aa:6f:33:c5:ff:5f:f8:15:
d5:1e:ab:12:d6:b4:54:a3:71:69:ef:e5:51:e0:69:27:55:1e:
d1:85:26:6a:dd:18:d2:5e:61:56:7d:73:a6:a7:6e:c7:04:7d:
49:8c:c2:0c:02:ba:33:71:96:29:4a:e2:30:79:9e:5b:27:5d:
b8:77:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:36:20 2025 by rpki-client