
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
File: l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer (raw, json)
Hash identifier: E5g90paUdnwTqLE7Ctq39fZS/dUUSy9+amN4Aqvr1Ss=
Subject key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 16E2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:04:52 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 169.239.212.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5858 (0x16e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:04:52 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36882A1AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:c5:09:4e:d1:5d:f6:60:a6:d4:2d:f1:9d:
5a:fc:79:8a:fa:88:69:20:29:2b:cc:d1:42:26:55:
59:3f:58:cc:dd:22:ff:33:de:bd:00:3a:56:1a:b4:
2c:cd:a4:c5:0f:3c:94:21:6f:4b:64:74:79:53:16:
aa:db:f2:de:48:cd:88:05:99:f2:fe:85:b7:04:a6:
fb:35:13:64:1a:bf:6c:65:7c:c2:00:13:91:62:4f:
6d:6b:00:8f:32:83:3a:f4:00:44:06:98:ef:52:17:
4b:89:34:6b:5b:27:59:e9:a7:0d:ef:96:31:59:46:
20:9b:cf:8f:57:2f:e2:56:9f:4b:e5:5c:6e:ca:f8:
1e:e6:3e:a9:17:1a:5d:77:b2:80:87:40:5d:0a:8d:
59:e2:76:99:75:ba:f1:62:16:ba:75:31:67:cc:ae:
12:44:89:cf:1f:df:0f:5e:88:65:40:36:e7:9a:8a:
06:0e:37:51:8e:95:a7:95:13:39:de:78:fb:19:05:
c2:4b:ef:12:f9:15:80:12:b1:4b:b2:19:6f:6c:c6:
58:25:a3:15:e8:eb:6d:01:21:70:a9:c6:e5:ad:51:
5a:61:95:e0:40:f5:48:85:bd:f3:22:9c:ee:1d:3a:
1a:fe:8b:56:80:94:83:70:a5:c6:e7:6f:60:9f:c8:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
sbgp-ipAddrBlock: critical
IPv4:
169.239.212.0/22
Signature Algorithm: sha256WithRSAEncryption
19:3a:0d:25:ab:cb:58:67:d4:6e:f1:8c:85:42:68:e3:5c:8e:
9d:c4:07:d4:b9:77:14:2b:a7:2d:bd:36:e5:7f:86:77:e0:8d:
5f:f3:37:92:e6:8b:26:e7:0e:61:4e:c9:e1:03:a7:49:56:26:
47:b6:38:93:c7:cc:e0:2b:48:6a:f6:65:28:b0:b3:4e:eb:5f:
a8:ee:2f:b4:6b:89:c1:4c:7d:13:ef:93:c8:36:49:65:fd:d6:
1b:0f:19:65:6e:49:04:53:df:05:1d:4d:62:a0:18:47:08:43:
77:86:01:8b:0f:a2:48:9e:b4:3b:2d:6f:dd:c3:ca:e9:40:13:
01:97:2a:8e:1b:e0:17:bc:0d:6f:b5:c2:f5:9b:bc:c4:76:41:
67:21:06:c1:6f:17:95:31:0f:af:cd:38:4f:b6:5c:ae:3a:81:
79:46:51:64:95:ef:49:ec:2e:70:4d:18:8b:8d:cf:62:5f:2e:
ba:d0:02:e1:a9:c5:52:c1:9e:f8:0f:85:8d:5d:53:21:5f:7a:
ff:cc:83:18:c8:97:a1:ec:ba:11:62:6c:8f:35:1d:94:3c:7f:
e4:bd:c9:6e:9d:2e:ad:a3:1e:1c:5b:8f:d2:f2:a2:23:89:e0:
19:e4:da:a7:1d:56:48:df:25:9a:b4:05:88:b7:fd:ce:c0:fe:
3f:28:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:35:10 2025 by rpki-client