Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ae3f3c03fefcbc0efbaf5ac1a07b6ecae8b53bd.cer
File: 0ae3f3c03fefcbc0efbaf5ac1a07b6ecae8b53bd.cer (raw, json)
Hash identifier: 2iJkmltNemNCvIzXbx/Ym/J2XfHARQcw/i5YXXt8Z68=
Subject key identifier: 93:47:E5:F2:4A:B9:88:91:A6:DD:A6:9D:C5:4C:C4:DD:94:FE:B9:96
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: CDAE5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/903d3bdc-e43d-435d-bd0b-33bf930e172b/0ae3f3c03fefcbc0efbaf5ac1a07b6ecae8b53bd.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/903d3bdc-e43d-435d-bd0b-33bf930e172b/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Thu 21 Jul 2022 17:15:09 +0000
Certificate not after: Sun 22 Oct 2023 17:17:59 +0000
Subordinate resources: IP: 45.4.172.0/22
IP: 45.4.196.0/22
IP: 128.201.4.0/22
IP: 170.0.4.0/22
IP: 170.81.124.0/22
IP: 181.41.140.0/22
IP: 181.224.128.0/19
IP: 190.92.128.0 -- 190.92.167.255
IP: 190.92.176.0/20
IP: 190.102.104.0/21
IP: 190.124.44.0/22
IP: 190.151.136.0/23
IP: 190.211.149.0 -- 190.211.151.255
IP: 200.0.94.0/24
IP: 200.0.137.0 -- 200.0.138.255
IP: 200.0.216.0/21
IP: 200.1.160.0/24
IP: 200.5.0.0 -- 200.5.8.255
IP: 200.5.11.0/24
IP: 200.9.82.0/23
IP: 200.9.115.0/24
IP: 200.10.152.0/24
IP: 200.10.155.0/24
IP: 200.10.160.0/24
IP: 200.10.165.0 -- 200.10.166.255
IP: 200.12.168.0/24
IP: 200.12.224.0/20
IP: 200.15.0.0/16
IP: 200.16.88.0/24
IP: 200.30.0.0/18
IP: 200.50.0.0/19
IP: 200.50.64.0/19
IP: 200.50.128.0/20
IP: 200.58.0.0/18
IP: 200.62.0.0/18
IP: 200.69.20.0 -- 200.69.27.255
IP: 200.225.32.0/20
IP: 200.229.16.0/20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13479516 (0xcdae5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Jul 21 17:15:09 2022 GMT
Not After : Oct 22 17:17:59 2023 GMT
Subject: CN=0ae3f3c03fefcbc0efbaf5ac1a07b6ecae8b53bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1a:30:91:23:54:02:ef:17:25:d0:8e:40:af:
69:13:ed:f7:51:f5:d2:9d:03:59:21:9b:5e:00:fb:
31:25:43:3c:c7:99:d7:f1:23:3f:16:4a:d5:e3:4f:
40:11:4c:de:4e:3b:60:fb:1b:8d:3c:4f:36:fd:bb:
77:0f:23:e3:cc:2c:9f:22:ab:93:56:25:db:87:f1:
1f:a9:e3:0e:50:a2:1d:0e:1b:96:21:61:4d:8b:01:
5b:5b:c8:19:29:78:41:f5:ff:63:8a:50:ae:9f:43:
62:f6:eb:16:2b:f4:dc:a3:37:9a:c1:93:47:a5:48:
82:fd:e4:c9:9a:8a:98:f3:ad:6f:87:d4:26:f4:b5:
13:94:7b:96:83:76:11:13:6c:b2:1f:95:01:17:dd:
9c:fe:b9:cd:dd:29:9b:d1:42:af:6c:b7:3b:39:d6:
af:60:26:97:54:32:fb:dd:fc:30:8a:ff:f1:63:10:
7f:fd:9c:63:9c:0a:e7:bf:fe:68:5f:00:6c:c7:45:
5a:62:bd:60:21:bb:11:1d:21:d4:c8:ce:2c:86:58:
c3:e2:3b:e8:52:d1:59:f6:b3:a0:a6:95:f9:3c:ec:
b3:64:fb:b4:41:76:d6:29:e1:66:01:6e:31:0a:63:
39:db:c8:56:d0:09:50:17:e2:ee:36:0d:e8:97:3d:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:E5:F2:4A:B9:88:91:A6:DD:A6:9D:C5:4C:C4:DD:94:FE:B9:96
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/903d3bdc-e43d-435d-bd0b-33bf930e172b/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/903d3bdc-e43d-435d-bd0b-33bf930e172b/0ae3f3c03fefcbc0efbaf5ac1a07b6ecae8b53bd.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.172.0/22
45.4.196.0/22
128.201.4.0/22
170.0.4.0/22
170.81.124.0/22
181.41.140.0/22
181.224.128.0/19
190.92.128.0-190.92.167.255
190.92.176.0/20
190.102.104.0/21
190.124.44.0/22
190.151.136.0/23
190.211.149.0-190.211.151.255
200.0.94.0/24
200.0.137.0-200.0.138.255
200.0.216.0/21
200.1.160.0/24
200.5.0.0-200.5.8.255
200.5.11.0/24
200.9.82.0/23
200.9.115.0/24
200.10.152.0/24
200.10.155.0/24
200.10.160.0/24
200.10.165.0-200.10.166.255
200.12.168.0/24
200.12.224.0/20
200.15.0.0/16
200.16.88.0/24
200.30.0.0/18
200.50.0.0/19
200.50.64.0/19
200.50.128.0/20
200.58.0.0/18
200.62.0.0/18
200.69.20.0-200.69.27.255
200.225.32.0/20
200.229.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:6d:62:86:40:17:47:f1:58:d1:2c:56:f9:ce:4d:ea:63:a2:
3a:90:aa:0a:00:f2:ac:93:f0:f7:6a:89:59:74:3c:54:98:2c:
a4:80:8d:43:b2:b0:e8:21:ac:c8:d4:fa:9c:8f:fc:03:4d:c9:
05:9f:53:e1:a0:9f:9a:a4:99:59:01:73:c4:91:21:3b:5c:c1:
db:30:fa:4e:bb:7a:17:f9:a4:34:83:6e:6a:08:b4:9c:48:24:
b7:23:15:f5:5d:93:b9:8a:ac:a4:80:13:68:17:1c:eb:fd:be:
37:d5:36:81:18:a1:e3:a1:d1:ca:50:e5:cd:60:d1:58:38:19:
fa:ed:02:64:56:83:4d:29:40:63:99:d0:88:68:f7:f8:7d:8b:
64:d2:02:54:85:18:8d:c8:3a:7a:68:cd:17:70:5f:76:41:94:
25:9f:1e:34:89:04:8d:f6:51:80:09:ef:a7:0c:c6:01:bb:af:
4e:66:06:f8:da:ec:00:2a:fd:e1:c0:ba:87:44:2b:48:b4:d1:
9e:06:08:1f:db:8b:ad:1c:36:99:b3:55:70:ea:75:6e:97:a6:
a7:17:d3:0d:d9:b1:e9:d4:e1:8a:01:4f:c1:4e:b6:b0:d1:3e:
81:b5:bb:12:fc:58:06:27:cf:7b:e0:c6:a6:d6:dc:7a:5e:1c:
20:b9:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:16 2023 by rpki-client on console-fra.rpki-client.org