Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
File: JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer (raw, json)
Hash identifier: uKQiLrQfb3YJPWQmipBgPbAjgxmh7uNO5Elo5InSRNY=
Subject key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 166A
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:41:34 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 147.110.0.0/16
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5738 (0x166a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:41:34 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3646FFEAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:84:16:c5:ff:4e:2a:da:59:6e:cf:58:72:
ea:5e:7b:36:fb:94:41:54:a7:67:a6:8a:f9:12:8a:
7b:32:b1:e9:64:1d:cf:e6:55:8b:f7:23:f8:b6:81:
c1:16:5e:46:f5:8e:2d:10:e2:bc:34:63:83:bc:ff:
5b:1f:c7:83:ee:09:54:cd:46:3f:cd:75:4c:0c:19:
7f:de:b0:0d:06:a2:ba:3c:52:dd:ee:1a:a2:88:90:
53:d8:26:14:ad:e7:75:9d:1c:f2:6e:a3:fb:1f:9d:
a4:fb:16:75:aa:a9:8c:7e:0d:8e:7e:4e:43:ec:7b:
28:8c:2b:4a:a3:6b:54:db:a5:a2:94:f7:fb:48:2a:
c9:3e:a1:9d:bb:be:ee:b5:fd:12:0b:0c:24:fb:e0:
41:25:95:1c:88:49:6a:8d:17:22:57:a4:ca:dc:46:
86:cc:a1:b8:7f:6a:82:80:4a:be:c5:18:88:17:57:
e2:8d:e9:b3:35:f4:79:87:7f:81:59:c6:58:9c:ad:
93:cd:71:bd:8f:47:0a:6a:dc:d1:e6:b0:ce:c2:42:
87:f6:42:09:e0:dd:ad:57:c6:d3:36:e2:81:0a:6a:
58:73:52:7c:6a:21:fc:ad:77:ad:c1:7e:b2:4f:00:
14:05:83:d5:00:69:fc:95:d7:64:74:64:4a:0a:5e:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
sbgp-ipAddrBlock: critical
IPv4:
147.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:13:95:59:88:91:1f:01:11:f4:d7:0f:0f:2a:cf:35:c6:d2:
9e:d8:61:07:c0:7e:57:54:1b:7a:34:8d:80:d7:3e:7c:d2:7c:
ac:df:e0:5d:db:55:3e:11:06:92:f7:97:10:36:c3:1a:30:e5:
70:72:44:77:d6:c5:57:b9:ab:7c:06:8e:3f:2c:09:61:99:75:
04:d3:87:db:43:29:b3:60:c0:53:94:59:2c:ed:fc:5d:88:b6:
a8:15:d5:23:51:b3:04:2c:20:b0:a9:5d:34:c1:94:d6:8a:fa:
23:b9:b2:a8:64:a3:ec:3c:fb:5c:67:16:a2:34:2f:db:1b:db:
df:1e:78:02:10:7a:d9:3d:b8:33:fc:26:0b:7f:0a:4b:ce:49:
c4:c0:b7:f7:f0:62:71:0a:09:4a:48:3b:d0:dd:6a:f5:f4:87:
ea:f9:5a:86:e4:fc:c6:08:59:8a:6d:59:dc:9c:0f:14:e6:2e:
de:7b:db:32:bd:6b:de:c2:5e:d8:6b:2d:aa:6f:70:9e:85:de:
5e:1e:87:98:14:3b:b8:05:77:01:b2:57:60:a5:b9:dc:a1:44:
c2:69:5c:cf:04:03:b6:1c:47:58:96:39:fd:83:0c:7a:08:fb:
1d:3c:fe:63:98:e7:f6:e7:11:71:2e:4c:49:0a:0b:24:14:73:
f6:b6:e9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 02:47:18 2025 by rpki-client