Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
File: xSvyehTUxJuqAvCZWQ287LDgS5c.cer (raw, json)
Hash identifier: vomEMkpJrK0v+Jd4C9ulJnR8aqr+eUlOYPpbefHD20Y=
Subject key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 1765
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:30:08 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 156.0.192.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5989 (0x1765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 01:30:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E8936AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:02:90:1a:4e:d4:90:f3:78:e4:70:ab:62:
7d:67:39:a9:a3:fd:87:83:49:a3:ba:1e:0c:67:bc:
be:b5:d6:ef:06:8a:0f:6e:d7:b9:03:dd:46:98:a9:
8a:77:cb:49:13:53:5c:41:c0:cd:a9:94:2e:ac:a5:
6a:03:e1:0b:59:e2:93:e4:50:59:5e:3d:6c:76:c2:
3e:9a:cb:c0:e0:66:ef:04:ab:ca:cf:9e:66:4b:df:
a3:ae:d9:60:89:db:a7:25:ad:87:31:36:2d:e5:81:
6f:ca:c3:1b:48:a4:46:dd:bb:83:62:9e:56:98:e7:
58:f4:74:fb:28:11:83:ee:0b:35:cf:97:7b:bb:bb:
f0:1f:2b:5f:36:b2:2d:07:ba:a2:f1:b4:37:47:d2:
29:19:f8:fd:d7:17:32:4c:69:89:e7:c8:5c:5b:85:
99:51:8a:fa:fe:1c:b4:18:36:9f:46:52:7d:06:57:
5c:3c:01:71:b0:47:2e:5f:30:a5:a3:d6:c5:95:3a:
af:c4:2c:be:9e:df:63:1c:05:b9:62:ce:27:1c:23:
78:eb:54:38:79:48:ea:f7:e8:0f:8a:58:c1:72:33:
b0:b2:59:a5:5e:40:91:72:f5:13:bc:19:a3:35:f8:
37:70:81:44:3d:eb:cb:c7:2a:4f:79:2f:e0:8e:83:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
sbgp-ipAddrBlock: critical
IPv4:
156.0.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:e3:58:30:cd:32:74:13:a2:c6:e5:7e:94:c0:26:34:dd:03:
71:9a:b6:32:53:0a:38:7c:09:e3:bc:85:1a:4d:62:81:23:4f:
38:3c:d9:32:c7:aa:62:eb:de:b3:24:ef:56:b9:0a:e6:4d:1b:
69:b8:43:13:0e:e7:8e:61:cb:11:89:14:f5:f4:14:3e:1f:6e:
d8:eb:ef:09:28:15:06:b5:98:7f:da:72:6c:97:6c:3d:d7:cb:
ac:f0:c1:46:72:82:43:3f:2c:d8:df:9e:b9:dc:b4:86:ca:fe:
c1:fe:42:c3:17:3e:20:51:69:ff:f4:e6:f2:2a:a7:b1:8d:2e:
90:f0:f9:42:ce:7b:ff:51:59:34:b6:e0:be:89:c5:3e:05:1c:
d9:34:9b:90:5c:38:76:44:59:c2:55:72:62:56:04:bb:d9:68:
5d:4f:01:c6:96:b8:c4:8d:16:a4:2a:f2:47:d9:0b:9d:27:6d:
cd:50:5b:44:3e:24:ba:42:59:df:9b:85:3b:93:b7:c5:74:db:
93:76:0a:0f:ae:d2:45:70:e2:d3:0c:49:05:5d:9b:c6:45:63:
91:e3:85:b6:d7:02:e7:fc:2b:f9:c6:e7:e1:03:1b:d9:49:37:
33:ca:a0:f7:29:4c:a5:6b:d3:91:a4:0e:42:84:bc:72:61:69:
56:95:a4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:37 2025 by rpki-client