Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
File: s4rg2ENn30CCL75YUHD2mDzRgFk.cer (raw, json)
Hash identifier: TmQjChVxRVCOH67bT2ZpThEx14OfTe6CkwpSKgZOkfU=
Subject key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1668
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:41:11 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 192.145.128.0/19
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5736 (0x1668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:41:11 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3645590AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:56:f1:45:e8:a2:97:9e:cd:1c:1d:d5:c8:
f8:4a:f7:2b:d8:ac:1c:bc:0d:c4:b5:6e:31:44:59:
2a:7f:53:fe:98:bb:30:ab:da:c5:c3:76:71:01:e8:
c4:b4:42:1e:b3:cd:65:1e:5a:27:d5:a5:2a:5d:d5:
f2:71:29:b1:0d:d3:2e:c8:43:4b:a2:fc:8d:a6:fe:
70:3d:5e:66:9d:75:8d:ea:4b:c5:b1:e9:88:72:e4:
0e:67:8d:a8:ea:9d:6c:08:e0:03:ef:08:bd:0c:71:
df:3f:78:0e:f1:f4:f3:69:64:da:d1:3f:57:f4:0b:
c7:f4:e3:ed:7d:29:9a:c3:27:93:10:ff:cf:06:47:
fb:8f:2a:a1:57:45:1c:9f:a4:94:1c:ea:32:c8:d2:
a9:91:8f:aa:84:83:7d:11:fe:43:64:87:69:1a:37:
7f:1e:90:b8:49:0b:82:59:3a:36:0d:e6:6e:fe:6c:
62:e1:04:ed:d7:ca:b5:41:34:f6:96:1b:e9:40:ae:
e2:37:f9:5a:e4:7f:67:b7:46:5e:88:7b:d7:ff:90:
d6:f7:37:a5:c5:2a:81:1b:3e:c0:f6:d8:56:a4:bb:
7a:ec:7f:25:c1:db:05:b2:fb:1b:62:09:76:d5:5f:
46:d0:91:fb:76:df:22:6c:3e:b7:67:5d:64:cd:71:
ab:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
sbgp-ipAddrBlock: critical
IPv4:
192.145.128.0/19
Signature Algorithm: sha256WithRSAEncryption
48:a9:83:36:c6:2d:1a:da:7a:be:56:c9:f3:3e:bd:5e:79:55:
dd:ba:c3:59:87:84:4a:a7:6e:09:42:7b:7b:ff:b6:78:df:9f:
aa:d1:0b:11:a1:f7:94:7c:09:50:51:9e:d6:58:d3:cd:10:37:
9b:47:ab:a2:f5:b5:8a:83:9c:11:74:69:e3:b1:a2:e0:e4:a8:
b1:1d:e7:c7:b4:76:65:0e:3a:be:9d:6c:c4:59:22:98:ad:be:
83:57:39:91:0e:a1:57:85:05:f3:d7:8a:e5:48:2b:31:71:fd:
fc:25:1b:11:fb:c5:01:69:cb:af:d1:4b:4d:d4:77:ea:9e:27:
7b:b8:c5:fa:86:cf:26:91:c3:d8:42:32:b3:18:89:b8:56:38:
47:6a:66:4f:98:76:f8:ab:68:95:cb:82:e2:22:33:fd:b4:b3:
39:b0:0f:b6:79:95:b3:31:d4:cd:00:6c:8d:09:2d:88:a6:07:
70:c5:35:1b:e9:79:40:6e:75:8c:b3:02:86:62:54:2f:17:fe:
3c:9a:ae:2b:49:13:da:bf:5c:43:7d:30:f7:42:19:73:08:2f:
ce:4c:3b:b0:69:b4:7f:25:b8:61:db:f0:80:9e:cd:d2:46:c1:
45:44:64:52:d6:f2:4b:b7:00:39:d7:58:51:a5:df:ad:64:75:
69:8f:c7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:54:22 2025 by rpki-client