Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
File: kjOEThK8fu30Ns4cyZ6uITZHJkc.cer (raw, json)
Hash identifier: pkIscwgkEVysJP3dgnIxk0LQcYiwsnCnm55833t49iQ=
Subject key identifier: 92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1781
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:35:53 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 168.155.0.0/16
IP: 192.157.190.0/24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6017 (0x1781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:35:53 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F8DABAR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:2c:70:0f:4d:5a:73:63:f4:b4:bd:b0:87:
78:63:3c:51:78:1a:7e:81:5a:ed:b7:47:92:08:60:
46:d2:c9:85:15:71:05:dd:28:f9:82:d4:ec:53:82:
4b:44:35:f3:6e:5b:e7:39:49:11:e2:f2:32:78:6b:
c5:41:01:bf:ca:05:b8:31:ef:86:f0:bf:0a:8a:16:
5d:ce:95:a0:2d:66:fe:ad:96:6f:18:4f:2b:c8:f7:
4c:a5:eb:f0:68:fe:ea:6c:d5:e0:cc:34:39:d0:b5:
0e:30:bd:74:63:3c:36:52:c3:bb:85:69:71:76:4b:
ad:7f:0e:d5:55:c6:fd:ca:53:9a:2b:f3:f2:ea:7e:
4a:40:5a:14:d5:e2:ee:89:19:be:5a:6e:96:46:8f:
f9:77:3e:86:63:68:80:cb:05:82:ff:7a:f9:2c:7c:
39:b0:dc:8a:3e:22:bf:e1:83:19:d7:99:97:d1:71:
0b:a5:59:55:9a:4f:76:9c:ef:91:a7:67:17:bf:2a:
5d:41:18:76:ff:66:e8:7d:8c:61:10:4f:de:a4:e6:
7d:19:7e:22:4d:e2:4a:80:79:da:11:92:56:bc:3c:
8e:06:4b:af:60:29:cd:3a:fb:1f:b7:0a:b6:13:89:
1f:0b:d8:e4:c6:0f:42:ba:14:2a:80:02:d7:3c:a8:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
sbgp-ipAddrBlock: critical
IPv4:
168.155.0.0/16
192.157.190.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:06:ab:51:99:29:20:a1:90:0f:83:4b:ad:04:f6:59:6c:38:
14:91:c9:5a:9b:de:d4:d4:6d:e0:14:62:7e:39:3c:40:9c:5f:
e5:17:5a:ab:54:3d:07:cd:76:66:81:e5:78:fa:34:94:01:63:
22:6f:5b:42:e3:36:93:bd:f3:15:6e:29:0e:c2:9e:94:70:2d:
39:4f:5e:31:43:85:60:ee:e2:24:ad:09:bf:e2:4a:b6:e1:25:
f9:5c:38:df:73:64:d1:d8:65:f4:d8:51:0c:86:5d:eb:26:57:
71:4f:56:35:de:2e:70:68:9b:0d:3d:6e:8e:9f:34:f2:38:37:
97:a4:84:65:1b:e5:05:34:1c:52:21:8a:78:07:ad:bb:d2:9e:
3d:02:bb:90:fd:55:20:41:8d:2d:ce:94:9d:b0:cc:4d:46:b9:
43:54:5e:2d:1c:21:89:10:72:4e:d3:f5:1e:2e:84:b3:a8:f4:
a5:7a:d3:17:0f:3b:7d:94:82:31:06:09:86:30:a5:fd:14:cd:
5b:bd:31:44:f9:b0:71:87:6d:df:12:25:60:4f:9d:12:f3:74:
bf:c4:e9:b2:fc:b1:7c:e5:a5:62:d4:d7:2c:3e:cc:8a:71:48:
5e:18:a7:de:35:9c:48:ea:9a:41:f8:9e:eb:10:b1:b4:b1:e1:
83:04:a3:8f
-----BEGIN CERTIFICATE-----
MIIGBzCCBO+gAwIBAgICF4EwDQYJKoZIhvcNAQELBQAwSzEWMBQGA1UEAxMNQVJJ
TlRPQUZSSU5JQzExMC8GA1UEBRMoQjg3QzVBNzVGM0Q5NTc0MTNBQjk5ODY0Njk0
NkQ0NTQxRDUxMTQ1NTAeFw0yNTAxMDEwMTM1NTNaFw0yNjAzMzEwMDAwMDBaMEgx
EzARBgNVBAMTCkYzNkY4REFCQVIxMTAvBgNVBAUTKDkyMzM4NDRFMTJCQzdFRURG
NDM2Q0UxQ0M5OUVBRTIxMzY0NzI2NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC5bixwD01ac2P0tL2wh3hjPFF4Gn6BWu23R5IIYEbSyYUVcQXdKPmC
1OxTgktENfNuW+c5SRHi8jJ4a8VBAb/KBbgx74bwvwqKFl3OlaAtZv6tlm8YTyvI
90yl6/Bo/ups1eDMNDnQtQ4wvXRjPDZSw7uFaXF2S61/DtVVxv3KU5or8/LqfkpA
WhTV4u6JGb5abpZGj/l3PoZjaIDLBYL/evksfDmw3Io+Ir/hgxnXmZfRcQulWVWa
T3ac75GnZxe/Kl1BGHb/Zuh9jGEQT96k5n0ZfiJN4kqAedoRkla8PI4GS69gKc06
+x+3CrYTiR8L2OTGD0K6FCqAAtc8qB9BAgMBAAGjggL2MIIC8jAdBgNVHQ4EFgQU
kjOEThK8fu30Ns4cyZ6uITZHJkcwHwYDVR0jBBgwFoAUuHxadfPZV0E6uZhkaUbU
VB1RFFUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wWQYDVR0fBFIw
UDBOoEygSoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi91SHhhZGZQWlYwRTZ1WmhrYVViVVZCMVJGRlUuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRv
cnkvMDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYXJpbi10by1hZnJp
bmljLmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEW
J2h0dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCCAUUGCCsG
AQUFBwELBIIBNzCCATMwbAYIKwYBBQUHMAWGYHJzeW5jOi8vcnBraS5hZnJpbmlj
Lm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5L0YzNkY4REFCLzc4Q0I5
MDUwQjlDNDExRTdBREQxOEM2MUY4QUVBMjI4LzA1BggrBgEFBQcwDYYpaHR0cHM6
Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBzAK
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZGOERBQi83OENCOTA1MEI5QzQxMUU3QUREMThDNjFGOEFFQTIy
OC9rak9FVGhLOGZ1MzBOczRjeVo2dUlUWkhKa2MubWZ0MCQGCCsGAQUFBwEHAQH/
BBUwEzARBAIAATALAwMAqJsDBADAnb4wDQYJKoZIhvcNAQELBQADggEBAKoGq1GZ
KSChkA+DS60E9llsOBSRyVqb3tTUbeAUYn45PECcX+UXWqtUPQfNdmaB5Xj6NJQB
YyJvW0LjNpO98xVuKQ7CnpRwLTlPXjFDhWDu4iStCb/iSrbhJflcON9zZNHYZfTY
UQyGXesmV3FPVjXeLnBomw09bo6fNPI4N5ekhGUb5QU0HFIhingHrbvSnj0Cu5D9
VSBBjS3OlJ2wzE1GuUNUXi0cIYkQck7T9R4uhLOo9KV60xcPO32UgjEGCYYwpf0U
zVu9MUT5sHGHbd8SJWBPnRLzdL/E6bL8sXzlpWLU1yw+zIpxSF4Yp941nEjqmkH4
nusQsbSx4YMEo48=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:37:33 2025 by rpki-client