Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
File: TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer (raw, json)
Hash identifier: 4UPCHFRRYRy8cXUlqJ95P7KIXFOQYdXnPq94PLKl258=
Subject key identifier: 4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 17E5
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 11 Mar 2025 07:33:04 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 192.231.237.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6117 (0x17e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Mar 11 07:33:04 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36ED8A8AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:ca:35:f4:16:94:13:5f:d2:b0:cd:87:a5:
a9:1a:56:71:39:da:58:6a:de:a2:55:62:5a:94:7e:
39:da:4d:e1:d8:fd:4a:b9:db:17:7a:a1:66:c1:62:
d2:b0:93:d8:36:16:94:59:22:63:06:eb:23:2e:d4:
f3:a0:9c:6f:12:fc:9c:aa:f6:70:f3:f6:0b:81:48:
89:14:1c:10:2c:07:fe:8d:0e:5e:cc:40:9b:3e:8b:
45:4a:bb:77:b4:07:2a:a3:81:8b:ed:07:c6:47:a4:
22:19:05:2c:1c:9c:ed:d6:00:c5:a9:c1:e2:a8:13:
0e:27:b1:53:25:f3:c8:f1:04:49:9c:a6:5b:5d:d4:
ef:1b:db:52:c3:c3:30:d8:97:03:99:74:43:c3:86:
6b:9e:cf:98:d7:63:f3:d8:5a:e6:5a:23:b5:20:d6:
71:41:15:1b:fd:86:76:a3:f2:90:d9:46:a2:6c:c1:
30:a9:95:26:26:44:31:90:80:22:01:1c:d3:d1:b0:
15:91:6d:7e:13:1c:14:ee:9c:1a:cf:51:2a:fb:14:
3b:93:33:ad:78:34:77:e0:60:4d:89:35:b9:03:c9:
fa:43:a8:22:82:8c:92:3e:94:f4:1c:28:64:2f:50:
2d:f4:50:e7:f3:74:b2:3f:8c:78:fa:70:93:82:4f:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
sbgp-ipAddrBlock: critical
IPv4:
192.231.237.0/24
Signature Algorithm: sha256WithRSAEncryption
80:83:cc:25:77:2e:79:9a:7c:0d:8a:08:9f:ab:aa:e0:7d:20:
90:09:c8:c2:83:12:6d:96:e3:e1:9d:cd:5f:78:df:22:f7:bc:
74:35:37:94:a3:4c:d6:74:ad:c8:d4:2d:cc:25:91:cc:95:80:
22:3e:75:72:f8:7e:0b:b3:45:f4:a6:f2:24:5f:97:cc:c1:2a:
8b:e1:64:88:3c:ba:c6:40:cb:43:9f:5f:77:b1:67:2a:6a:95:
5f:21:72:4c:ac:67:d9:59:13:5d:7a:cf:96:2e:31:8f:be:2f:
89:5b:4b:ce:85:9c:91:6b:11:76:e8:99:4c:64:de:9c:47:3f:
aa:68:35:a4:8e:3f:e3:95:97:6a:96:ba:d4:ca:30:dd:15:0c:
2f:7c:1d:05:3f:2a:5e:35:c7:80:ed:29:46:6b:d9:69:a4:60:
00:77:24:b8:be:ca:a9:30:6d:76:28:00:6c:31:64:a4:ad:fb:
f8:ad:4f:43:c3:11:09:82:1e:db:f1:95:7b:75:a6:ea:76:e5:
2e:14:33:c4:ab:7c:7d:2f:61:f4:7b:8b:6d:69:fe:56:c4:b0:
d1:f1:78:6d:5c:9f:e0:ec:cf:d6:57:dd:3e:0a:69:1e:8e:a6:
88:cc:d8:0a:d0:97:69:6c:d3:27:1a:1b:20:42:9f:8b:5b:47:
ab:de:ea:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:42:10 2025 by rpki-client