Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
File: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer (raw, json)
Hash identifier: FkePdCwfD3p50MwrLWtL2qDHlsLiURMwnYlDaSEe4Xs=
Subject key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1646
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:34:34 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.19.128.0/20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5702 (0x1646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:34:34 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3632159AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:87:48:3a:2c:f2:6e:59:c5:a4:4a:fa:c8:
85:bd:6b:c5:02:86:d1:04:37:f1:67:d5:82:d4:c8:
97:25:e8:51:f1:78:3a:26:00:c8:93:93:d0:c8:0e:
45:39:c1:19:ac:4f:08:d8:1c:04:a5:25:65:e1:b4:
72:3d:cc:89:46:9d:0a:41:e4:fb:3b:d5:72:7b:76:
16:e2:5d:96:80:e9:6c:b7:31:a2:f0:78:5f:4e:c4:
11:f6:7c:c8:c3:83:c6:d1:60:6e:42:83:91:58:ce:
6b:af:7d:63:11:db:8e:d4:01:7b:e3:ad:b8:ea:50:
ff:8e:6b:40:0c:40:c7:a3:0f:b9:c2:1a:23:31:10:
3d:df:a6:a1:1f:2f:17:00:a4:81:d0:7d:92:4c:b8:
46:be:14:47:e1:86:6f:86:eb:e7:6d:dd:eb:80:eb:
b9:ab:76:5a:e4:50:50:d5:62:82:87:9e:d6:dc:24:
2f:ff:2f:5b:f0:a6:2f:ff:fc:ec:2a:1c:66:9d:eb:
73:16:79:60:22:d1:18:4b:30:5d:ea:18:c4:c6:dc:
75:f9:23:43:7d:c7:aa:fd:ab:4c:7c:e2:c4:2a:f3:
c1:70:5c:03:16:d5:3d:93:bb:33:be:ac:b2:32:5e:
26:da:99:d9:b2:2a:f9:2f:d7:e0:09:81:4d:29:b8:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
sbgp-ipAddrBlock: critical
IPv4:
160.19.128.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:e2:46:f8:8b:55:dc:f9:d4:89:58:c7:84:b6:f3:96:92:31:
ee:c0:58:ff:1e:25:43:c6:9e:97:fe:66:52:93:54:16:77:e0:
45:a5:e8:f0:60:4b:99:ff:50:93:8e:01:99:1d:f2:09:08:05:
37:67:8d:a3:2c:fa:e6:43:15:e1:10:65:d7:33:2f:85:75:fb:
14:3d:3b:be:d3:16:e9:99:1b:75:0e:cd:e1:f8:14:8c:59:f1:
e8:0e:6b:84:b4:a9:f2:1c:ac:a2:36:f7:b8:11:3a:7f:bc:16:
08:22:55:5c:2c:0a:45:18:41:27:2d:b1:71:18:0f:38:69:8d:
6c:d1:04:5b:6e:c8:f4:3e:9f:e0:90:ad:c6:88:43:5f:5f:e9:
1e:95:5b:95:98:2a:f4:19:86:f5:8d:bc:e1:83:f2:0d:90:cc:
df:3c:e3:5c:71:45:44:18:9c:7b:1f:83:64:39:26:db:c3:1c:
f2:91:07:58:90:b8:c4:2c:ab:84:ab:34:fb:90:67:3b:f0:05:
84:8d:5c:c4:45:77:a1:85:e3:87:c0:cb:01:2d:84:21:6f:be:
17:12:2c:4e:cb:27:fc:7d:65:e3:98:0c:f4:f9:06:cd:08:45:
ee:af:a9:2e:be:d1:46:55:fe:dd:e4:db:1e:f3:d8:c8:d1:4c:
4c:61:59:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:04:55 2025 by rpki-client