Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
File: nLoUINchzAMCPFAG0iUcILr0yII.cer (raw, json)
Hash identifier: HezIH1dWGiRZv40M0QZ0ZBu6PRkArNF4B8r7tcgrMWg=
Subject key identifier: 9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 167C
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:45:03 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.19.112.0/20
IP: 169.239.208.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5756 (0x167c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:45:03 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3651E73AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:23:35:29:24:bc:c9:fb:02:25:8e:77:79:
94:d2:bf:07:c0:4c:db:24:5d:0c:83:15:55:9d:40:
3b:29:d6:90:95:20:e0:c0:02:36:39:78:fb:41:10:
95:6d:2a:b8:83:5e:17:aa:50:47:51:55:c5:b2:01:
69:8c:99:2f:b1:29:ba:3b:b1:29:f8:17:54:12:36:
14:cf:3d:c1:fb:af:7f:d4:bd:fa:8c:a6:fd:35:15:
d0:2f:a1:e7:9b:3e:31:fa:7e:c4:46:96:cc:db:3e:
20:c0:be:60:e5:f1:c9:45:ca:4a:ae:7f:79:91:18:
17:f4:19:0c:63:4b:57:29:e0:98:78:f1:be:70:a4:
c2:e0:a9:cd:03:e3:c2:cf:b5:9d:33:41:3b:2e:a9:
9d:ae:fa:8e:6a:79:1e:40:90:31:9c:71:dd:29:a1:
28:ce:88:e5:0d:af:bd:73:74:3f:29:81:b0:05:f0:
9d:4f:b4:c0:70:5e:f3:04:ad:94:bb:20:e6:80:1e:
87:20:44:4f:82:59:d1:23:9f:f3:f6:ef:b7:8a:bc:
c2:a1:f6:ea:51:a8:06:0e:cf:87:db:37:c0:36:46:
ae:e6:24:1e:e6:80:23:8f:e2:ab:4d:c2:2b:11:84:
9d:e0:b5:f4:e9:40:15:43:4a:18:30:fe:37:13:5f:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
sbgp-ipAddrBlock: critical
IPv4:
160.19.112.0/20
169.239.208.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:ac:0a:89:5b:df:ed:49:4e:33:e8:c6:c1:99:e1:4b:5d:7e:
16:76:f7:9b:06:3c:db:34:28:bd:d1:7a:a5:5c:54:a1:41:44:
a7:f9:de:d9:5e:95:16:67:8c:c8:40:06:c8:14:b5:64:e9:d1:
c3:2b:46:69:26:f9:74:e6:c7:d0:eb:24:ff:91:21:5e:54:d6:
da:e9:25:ab:66:81:88:c6:76:9f:5f:86:dc:61:e5:51:c5:4e:
83:d8:db:46:99:a5:80:5f:af:b1:11:b3:4e:1e:34:21:a6:e4:
71:44:60:48:7e:de:38:a7:92:04:8e:af:ff:ea:58:ba:07:a8:
36:fb:57:07:dd:0e:18:9a:82:29:fe:48:ce:70:18:0b:c3:f7:
a4:05:c8:9b:1e:9e:9d:58:87:44:9c:24:5f:cb:22:5f:b4:4f:
c0:93:48:8a:cf:44:1d:6d:7d:98:57:69:3c:0c:ed:bb:a2:f3:
37:ba:65:55:38:3c:cb:a0:29:0e:2c:e4:0a:2f:29:25:45:04:
34:13:96:e2:13:60:a9:c9:bb:e3:76:dd:b2:22:6e:e0:f8:21:
c3:6e:f9:67:34:20:1d:63:a4:ea:3d:a3:89:28:bd:67:3f:f9:
86:8c:09:19:c8:95:1b:24:54:f7:e1:61:d7:34:b6:f5:22:f5:
5c:fd:bb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:03 2025 by rpki-client