Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
File:                     529d28a5769af1e1987aada52d4d9ac3bec39b68.cer (raw, json)
Hash identifier:          rxOptUVKLgBzKHDM4z3CnTQMz2lHE0nrPppYGJwVQMk=
Subject key identifier:   43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108D323
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:31 +0000
Certificate not after:    Tue 29 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 10697
                          IP: 190.110.224.0/24
                          IP: 190.110.229.0 -- 190.110.255.255
                          IP: 190.114.96.0/19
                          IP: 200.50.160.0/19
                          IP: 200.123.32.0 -- 200.123.53.255
                          IP: 200.123.55.0 -- 200.123.63.255
                          IP: 2800:820::/32

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 20:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17355555 (0x108d323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:31 2017 GMT
            Not After : Apr 29 06:00:00 2025 GMT
        Subject: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:f2:45:4d:e8:8f:99:93:a3:fb:b2:d5:d1:
                    6f:2b:02:57:cb:b1:f7:0f:1b:e3:7a:3f:d0:3a:4a:
                    ee:b9:e4:78:91:d9:99:7d:fe:e1:af:44:3a:53:42:
                    40:2d:ab:92:64:42:9a:6f:10:cf:cc:03:cb:28:4f:
                    6c:da:46:79:d4:2f:7e:a7:a5:16:2f:65:f7:97:4b:
                    89:d5:18:ab:5f:07:40:0d:69:14:69:ab:74:ad:a1:
                    b8:a4:34:7a:66:5a:62:5b:c2:c7:11:75:80:29:62:
                    de:ea:82:d4:ba:d2:2f:a2:7c:20:46:7c:a0:d0:8a:
                    fd:bf:ba:23:35:61:3e:86:94:f9:59:6f:b8:60:54:
                    af:e5:d1:56:2f:4c:ad:59:b0:f4:63:aa:92:8b:d8:
                    d0:7b:1d:34:82:6e:b2:19:e0:5e:06:52:33:c3:75:
                    60:93:f9:03:c9:af:01:93:80:8a:cf:8d:58:1c:6a:
                    d1:4e:ee:98:64:03:15:f4:43:9c:b5:90:cd:31:74:
                    5a:d5:2f:81:8f:64:80:87:52:99:51:a8:2a:27:7c:
                    a0:6d:0a:c8:db:f6:37:1c:9c:6f:a7:30:fc:48:e8:
                    13:c6:14:8b:e2:a7:92:c3:76:98:94:0a:06:c2:ae:
                    49:68:d0:dd:fa:f4:f0:e7:c2:f7:85:52:7e:0a:f1:
                    24:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.224.0/24
                  190.110.229.0-190.110.255.255
                  190.114.96.0/19
                  200.50.160.0/19
                  200.123.32.0-200.123.53.255
                  200.123.55.0-200.123.63.255
                IPv6:
                  2800:820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10697

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:29:0c:93:d0:90:6f:9f:59:aa:1a:22:ec:cd:91:06:43:
         b3:a1:43:0b:58:51:95:ce:04:6d:46:b5:1f:19:54:fc:6c:be:
         d6:28:b8:e7:23:02:49:ce:17:39:3c:04:8f:8c:1a:aa:4f:25:
         7e:cc:8a:be:dd:a5:a5:d7:aa:4b:be:f1:7e:e9:8b:56:0b:36:
         80:6a:11:cf:18:88:e3:4f:a2:f2:4b:14:58:7e:44:8f:19:e9:
         dd:dc:7a:20:46:43:8a:87:24:d3:6a:19:51:d9:fa:69:8d:8a:
         e3:e8:12:cd:e7:f9:ad:66:90:9b:f2:f4:33:6c:9d:e6:48:b7:
         3d:4b:7a:c7:0e:64:da:f6:42:a2:1f:b9:ec:0a:e2:f3:4c:d8:
         20:42:23:d3:b2:1f:09:be:07:8f:3b:bf:88:2e:cb:89:c2:de:
         d1:d9:60:93:c0:f8:ec:ac:52:48:d4:39:4d:17:43:f3:4b:cf:
         e5:74:d8:9b:74:12:e4:ed:9a:ee:d8:c0:84:d6:72:60:25:8c:
         86:54:ba:78:9c:5b:ab:d9:28:02:5e:d5:9b:77:c1:f4:37:9c:
         cf:40:0c:42:bb:42:79:b3:84:99:f0:5e:dc:e2:30:6e:4e:4f:
         11:b5:49:16:95:ba:f3:9f:56:be:57:47:56:4e:1a:16:8c:70:
         02:49:d1:fb
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIEAQjTIzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzMVoXDTI1MDQyOTA2MDAw
MFowMzExMC8GA1UEAxMoNTI5ZDI4YTU3NjlhZjFlMTk4N2FhZGE1MmQ0ZDlhYzNi
ZWMzOWI2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMue8kVN6I+Z
k6P7stXRbysCV8ux9w8b43o/0DpK7rnkeJHZmX3+4a9EOlNCQC2rkmRCmm8Qz8wD
yyhPbNpGedQvfqelFi9l95dLidUYq18HQA1pFGmrdK2huKQ0emZaYlvCxxF1gCli
3uqC1LrSL6J8IEZ8oNCK/b+6IzVhPoaU+VlvuGBUr+XRVi9MrVmw9GOqkovY0Hsd
NIJushngXgZSM8N1YJP5A8mvAZOAis+NWBxq0U7umGQDFfRDnLWQzTF0WtUvgY9k
gIdSmVGoKid8oG0KyNv2Nxycb6cw/EjoE8YUi+KnksN2mJQKBsKuSWjQ3fr08OfC
94VSfgrxJFkCAwEAAaOCAz0wggM5MB0GA1UdDgQWBBRDdnrIucRG5BPdorXJhToX
aKThxTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0
LTQzZDUtODJmNy00ZDkzOGU2MDU3MWUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00
M2Q1LTgyZjctNGQ5MzhlNjA1NzFlLzUyOWQyOGE1NzY5YWYxZTE5ODdhYWRhNTJk
NGQ5YWMzYmVjMzliNjgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBj
BggrBgEFBQcBBwEB/wRUMFIwQQQCAAEwOwMEAL5u4DALAwQAvm7lAwMAvm4DBAW+
cmADBAXIMqAwDAMEBch7IAMEAch7NDAMAwQAyHs3AwQGyHsAMA0EAgACMAcDBQAo
AAggMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAinJMA0GCSqGSIb3DQEBCwUAA4IB
AQCXzSkMk9CQb59Zqhoi7M2RBkOzoUMLWFGVzgRtRrUfGVT8bL7WKLjnIwJJzhc5
PASPjBqqTyV+zIq+3aWl16pLvvF+6YtWCzaAahHPGIjjT6LySxRYfkSPGend3Hog
RkOKhyTTahlR2fppjYrj6BLN5/mtZpCb8vQzbJ3mSLc9S3rHDmTa9kKiH7nsCuLz
TNggQiPTsh8JvgePO7+ILsuJwt7R2WCTwPjsrFJI1DlNF0PzS8/ldNibdBLk7Zru
2MCE1nJgJYyGVLp4nFur2SgCXtWbd8H0N5zPQAxCu0J5s4SZ8F7c4jBuTk8RtUkW
lbrzn1a+V0dWThoWjHACSdH7
-----END CERTIFICATE-----
Generated at Thu Feb 15 21:34:55 2024 by rpki-client on console-ams.rpki-client.org