Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
File: 529d28a5769af1e1987aada52d4d9ac3bec39b68.cer (raw, json)
Hash identifier: rxOptUVKLgBzKHDM4z3CnTQMz2lHE0nrPppYGJwVQMk=
Subject key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: 0108D323
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 17 Nov 2017 18:36:31 +0000
Certificate not after: Tue 29 Apr 2025 06:00:00 +0000
Subordinate resources: AS: 10697
IP: 190.110.224.0/24
IP: 190.110.229.0 -- 190.110.255.255
IP: 190.114.96.0/19
IP: 200.50.160.0/19
IP: 200.123.32.0 -- 200.123.53.255
IP: 200.123.55.0 -- 200.123.63.255
IP: 2800:820::/32
Validation: Failed, certificate revoked on Thu 15 Feb 2024 20:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17355555 (0x108d323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Nov 17 18:36:31 2017 GMT
Not After : Apr 29 06:00:00 2025 GMT
Subject: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:f2:45:4d:e8:8f:99:93:a3:fb:b2:d5:d1:
6f:2b:02:57:cb:b1:f7:0f:1b:e3:7a:3f:d0:3a:4a:
ee:b9:e4:78:91:d9:99:7d:fe:e1:af:44:3a:53:42:
40:2d:ab:92:64:42:9a:6f:10:cf:cc:03:cb:28:4f:
6c:da:46:79:d4:2f:7e:a7:a5:16:2f:65:f7:97:4b:
89:d5:18:ab:5f:07:40:0d:69:14:69:ab:74:ad:a1:
b8:a4:34:7a:66:5a:62:5b:c2:c7:11:75:80:29:62:
de:ea:82:d4:ba:d2:2f:a2:7c:20:46:7c:a0:d0:8a:
fd:bf:ba:23:35:61:3e:86:94:f9:59:6f:b8:60:54:
af:e5:d1:56:2f:4c:ad:59:b0:f4:63:aa:92:8b:d8:
d0:7b:1d:34:82:6e:b2:19:e0:5e:06:52:33:c3:75:
60:93:f9:03:c9:af:01:93:80:8a:cf:8d:58:1c:6a:
d1:4e:ee:98:64:03:15:f4:43:9c:b5:90:cd:31:74:
5a:d5:2f:81:8f:64:80:87:52:99:51:a8:2a:27:7c:
a0:6d:0a:c8:db:f6:37:1c:9c:6f:a7:30:fc:48:e8:
13:c6:14:8b:e2:a7:92:c3:76:98:94:0a:06:c2:ae:
49:68:d0:dd:fa:f4:f0:e7:c2:f7:85:52:7e:0a:f1:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.224.0/24
190.110.229.0-190.110.255.255
190.114.96.0/19
200.50.160.0/19
200.123.32.0-200.123.53.255
200.123.55.0-200.123.63.255
IPv6:
2800:820::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
10697
Signature Algorithm: sha256WithRSAEncryption
97:cd:29:0c:93:d0:90:6f:9f:59:aa:1a:22:ec:cd:91:06:43:
b3:a1:43:0b:58:51:95:ce:04:6d:46:b5:1f:19:54:fc:6c:be:
d6:28:b8:e7:23:02:49:ce:17:39:3c:04:8f:8c:1a:aa:4f:25:
7e:cc:8a:be:dd:a5:a5:d7:aa:4b:be:f1:7e:e9:8b:56:0b:36:
80:6a:11:cf:18:88:e3:4f:a2:f2:4b:14:58:7e:44:8f:19:e9:
dd:dc:7a:20:46:43:8a:87:24:d3:6a:19:51:d9:fa:69:8d:8a:
e3:e8:12:cd:e7:f9:ad:66:90:9b:f2:f4:33:6c:9d:e6:48:b7:
3d:4b:7a:c7:0e:64:da:f6:42:a2:1f:b9:ec:0a:e2:f3:4c:d8:
20:42:23:d3:b2:1f:09:be:07:8f:3b:bf:88:2e:cb:89:c2:de:
d1:d9:60:93:c0:f8:ec:ac:52:48:d4:39:4d:17:43:f3:4b:cf:
e5:74:d8:9b:74:12:e4:ed:9a:ee:d8:c0:84:d6:72:60:25:8c:
86:54:ba:78:9c:5b:ab:d9:28:02:5e:d5:9b:77:c1:f4:37:9c:
cf:40:0c:42:bb:42:79:b3:84:99:f0:5e:dc:e2:30:6e:4e:4f:
11:b5:49:16:95:ba:f3:9f:56:be:57:47:56:4e:1a:16:8c:70:
02:49:d1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 23:53:34 2024 by rpki-client on console-fra.rpki-client.org