Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
File: xLvN753H5o-RhMgMCHGMIG7d9ws.cer (raw, json)
Hash identifier: TmGKdOvuuRW2v3pYZQ/JjrK/6SGchFB/tdP47xsJQCE=
Subject key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 17B5
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 27 Jan 2025 14:54:48 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 129.0.0.0/16
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6069 (0x17b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 27 14:54:48 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363DCF2AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:93:62:7e:f6:8e:79:29:a5:f1:9a:38:fa:
34:4d:8d:e0:a2:33:60:20:b7:6a:92:6e:45:ac:b5:
43:27:be:1f:77:cd:22:e3:8c:95:b7:b6:ac:ba:e9:
ea:57:d6:5a:d6:c7:39:cd:6f:7c:42:c6:d6:0d:51:
67:fd:f9:2d:76:f6:de:4b:b3:08:2c:ce:24:8b:c5:
94:93:2e:1a:41:5a:35:36:88:9d:90:fe:68:59:77:
9a:d4:f0:90:1f:d3:1c:e9:80:2d:00:05:d3:21:a6:
75:48:aa:6f:86:30:7f:cf:46:27:29:16:00:d8:4d:
eb:85:51:54:f4:d5:c0:2a:a3:f3:12:cf:01:72:d0:
af:85:42:7a:46:cd:1a:de:59:2f:14:c4:d2:f4:c4:
6d:52:aa:38:d9:db:02:4a:e7:f7:4e:81:c5:44:69:
f9:69:b5:2b:c1:2b:05:35:c2:9a:8f:85:a0:4d:a9:
0d:26:bc:bf:15:d4:99:87:62:f9:44:c0:ed:1d:89:
07:ac:ba:50:e0:2b:25:53:a7:7d:6a:eb:ed:a2:04:
7e:55:9c:fa:5d:aa:fd:66:52:20:73:d7:d8:1e:0f:
b5:c6:68:0c:a7:68:8c:94:4c:b1:3c:64:2d:43:18:
a6:45:e9:8c:d9:3e:e7:01:74:a5:44:73:b0:49:e2:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
sbgp-ipAddrBlock: critical
IPv4:
129.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:0c:93:e0:91:60:ed:d6:26:aa:d8:bc:7a:bd:c4:47:89:d2:
bc:3e:7c:8d:2b:b2:f4:37:84:8b:6b:0b:01:1d:95:d2:66:15:
b4:8c:86:b4:6e:e6:34:c9:ce:48:d5:f1:ad:98:c4:d6:08:6b:
bd:94:da:d2:de:84:8f:d3:c2:2b:11:08:46:de:a7:06:90:45:
b1:4a:b0:64:21:2c:24:7d:68:7b:50:63:b7:64:64:46:3c:d5:
57:fd:58:bd:bb:76:d0:9c:46:8d:50:91:51:96:ff:db:1e:ea:
21:3f:c9:f7:d5:3f:ee:30:c9:37:56:15:9f:21:b1:f5:90:18:
40:fc:e8:3a:75:7d:99:2a:09:03:27:cb:b8:26:9b:22:a8:1b:
e0:cb:26:e9:b2:1a:61:b6:05:32:d0:bb:9e:97:95:b4:4b:3a:
c2:26:ea:18:db:81:c9:da:04:75:10:73:fa:6b:b6:45:ef:f9:
24:72:2f:f6:27:49:6a:47:b8:5c:57:49:5a:c6:12:0a:32:ac:
c1:24:cc:f4:20:e7:b7:cc:80:c2:27:f2:4e:77:e9:7c:0a:41:
fe:72:8f:9b:4d:a9:9e:65:3e:d5:de:0c:ed:49:a3:62:e1:a4:
52:bd:30:18:8f:1e:72:e5:d7:b2:41:c5:fe:0b:f1:dd:da:e6:
b9:ca:08:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:35:00 2025 by rpki-client