Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
File: OckZvvVPpaxnw34-dWyhP7I0tT8.cer (raw, json)
Hash identifier: D45WvMHiF5JeIri5e5dNZdMlAr6YGzwUkjnEkt2lqSU=
Subject key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 177D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:35:03 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 168.253.0.0/19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6013 (0x177d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:35:03 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F68F4AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:ed:a4:94:1c:8e:23:85:cb:56:2a:a0:16:
75:34:34:ea:71:d6:4b:ae:e7:4e:5d:be:6b:8c:03:
b4:04:c3:fc:4b:8e:35:e3:46:d6:02:81:58:54:8d:
da:80:ad:88:ff:d0:53:8b:5d:61:a1:4e:3a:c3:f8:
d0:c1:90:01:93:27:a5:0a:4d:2d:b2:06:64:17:82:
a4:bc:52:8a:4b:39:a3:08:e7:9b:67:0e:6e:7f:8d:
1b:56:d1:3f:89:77:63:a3:89:3c:bc:4f:5d:80:f7:
ea:0d:e7:88:55:33:c4:f4:38:08:8a:be:12:2e:f9:
88:b6:9d:c5:f7:d1:57:18:de:ac:30:e2:3a:1f:c7:
6e:8f:e2:28:8e:02:22:5e:2f:5e:eb:97:38:60:a1:
8f:44:25:72:3e:a9:3d:32:3f:6c:e1:39:9d:47:d5:
9a:47:58:ac:72:98:80:e6:38:9d:aa:b8:7a:d9:36:
04:05:4e:ec:05:1d:b5:4f:96:c7:08:08:bd:4b:b0:
c6:f3:dd:9f:73:28:a1:da:ef:b9:33:3b:69:e8:de:
40:3d:21:3a:a2:e6:50:72:e5:bc:62:d6:91:42:7a:
de:14:38:31:85:7b:7f:93:82:14:f1:e5:85:b7:50:
aa:e5:6f:08:43:43:4a:31:62:7d:5c:b1:88:a4:9f:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
sbgp-ipAddrBlock: critical
IPv4:
168.253.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:50:ce:c5:f2:07:63:86:57:a3:00:14:e6:b0:be:a1:6f:66:
ab:86:57:0a:0c:25:ec:23:ff:ae:39:45:5f:84:dd:ce:b9:22:
d2:dd:ce:6a:de:2a:74:8f:39:8f:c6:89:8d:3c:d0:9b:62:9b:
86:cb:5a:39:31:b9:c9:47:72:18:d1:89:70:38:99:9b:e5:27:
0b:c0:15:e2:1c:db:04:11:03:4f:f3:e8:45:32:cd:d5:da:04:
04:d1:ec:fb:04:80:ae:d1:76:dc:62:ec:6d:29:8b:10:1c:2b:
77:12:5d:0c:be:5d:6f:f2:25:9f:cc:1e:71:5f:61:78:3c:d1:
7d:34:ab:7f:f2:b8:d1:29:de:13:6b:9e:04:1a:ff:6b:c1:37:
56:f4:ee:35:48:0b:43:4a:0d:58:6d:68:17:3b:ad:5b:a6:86:
b7:e5:30:be:3f:4a:f3:86:67:19:d8:ec:8b:ed:a7:be:c2:d1:
15:4b:0e:fd:7c:76:21:66:e5:45:7b:bf:a0:92:62:9c:7d:03:
36:93:04:35:db:10:8b:c6:a9:89:55:14:fe:ea:8b:9e:1f:d1:
39:8e:fd:75:ab:1b:c0:91:32:84:7d:14:16:70:91:45:dd:fa:
f7:55:68:b2:c5:9e:54:c8:3a:ad:7e:0c:ed:7e:5f:18:06:36:
ec:a2:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:42:24 2025 by rpki-client