Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
File:                     5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer (raw, json)
Hash identifier:          N9MzO7YlZkZTxVFvvR9pVn2xXhxI60jPS7Dz1R7E9IM=
Subject key identifier:   BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1B0E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:21 +0000
Certificate not after:    Tue 16 Apr 2024 15:00:00 +0000
Subordinate resources:    AS: 6458
                          AS: 13682
                          AS: 14754
                          IP: 181.209.128.0/17
                          IP: 186.151.0.0 -- 186.151.93.255
                          IP: 186.151.95.0 -- 186.151.255.255
                          IP: 190.56.0.0/16
                          IP: 190.143.128.0 -- 190.143.239.255
                          IP: 190.148.0.0 -- 190.148.84.255
                          IP: 190.148.86.0 -- 190.149.133.255
                          IP: 190.149.135.0 -- 190.149.151.255
                          IP: 190.149.153.0 -- 190.149.255.255
                          IP: 200.6.192.0/18
                          IP: 200.119.128.0 -- 200.119.150.255
                          IP: 200.119.154.0 -- 200.119.183.255
                          IP: 201.216.128.0/18
                          IP: 216.230.128.0/19
                          IP: 2800:98::/32
                          IP: 2800:890::/32

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 14:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14790885 (0xe1b0e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:21 2017 GMT
            Not After : Apr 16 15:00:00 2024 GMT
        Subject: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:72:61:08:7c:76:3f:e3:65:c3:3a:1a:a4:
                    34:e8:3a:16:f7:c1:a3:78:b8:f0:d9:71:8d:ce:ac:
                    e7:d5:4f:6b:4e:df:62:8f:2b:9c:58:7f:56:3b:5d:
                    af:cc:03:a4:3a:ff:9c:e5:43:f5:c5:a5:2e:34:d0:
                    85:54:2b:17:87:6d:3d:39:4e:28:58:15:1f:ff:5b:
                    0b:8b:36:af:93:5d:a5:0b:40:ee:65:55:1a:1d:62:
                    8b:7b:a1:3d:c0:07:1a:ad:d2:50:d3:0f:14:92:5e:
                    e6:95:5b:f1:e2:03:ff:69:28:95:a8:e2:d3:60:73:
                    34:65:b4:a1:9b:7c:f5:96:a9:d9:f2:df:fe:79:d8:
                    b0:5d:25:51:2d:8a:ff:d4:aa:54:08:2a:e1:e0:83:
                    e0:88:a5:86:55:28:c8:c8:c6:9f:24:fa:b7:eb:10:
                    02:e0:5d:07:de:14:23:71:b9:5b:6b:5e:21:b8:4d:
                    9e:4f:45:34:ae:0c:3c:f6:d4:13:fa:51:b3:9e:bc:
                    9a:3e:ad:0b:21:0a:6a:d0:19:6a:bc:68:75:4a:96:
                    2f:69:b0:99:2e:7c:f5:ab:da:8c:a3:84:05:6d:b3:
                    cc:5f:b6:d6:02:01:00:e4:2a:08:51:9f:50:87:e2:
                    e5:6d:bc:af:d5:99:f2:6e:15:07:41:53:fc:9b:e0:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.128.0/17
                  186.151.0.0-186.151.93.255
                  186.151.95.0-186.151.255.255
                  190.56.0.0/16
                  190.143.128.0-190.143.239.255
                  190.148.0.0-190.148.84.255
                  190.148.86.0-190.149.133.255
                  190.149.135.0-190.149.151.255
                  190.149.153.0-190.149.255.255
                  200.6.192.0/18
                  200.119.128.0-200.119.150.255
                  200.119.154.0-200.119.183.255
                  201.216.128.0/18
                  216.230.128.0/19
                IPv6:
                  2800:98::/32
                  2800:890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6458
                  13682
                  14754

    Signature Algorithm: sha256WithRSAEncryption
         79:90:2e:6e:50:6d:32:0b:8a:84:1e:d6:f6:e5:cf:eb:4d:30:
         9e:91:98:33:39:a1:50:df:db:1b:7b:8f:d0:a8:8c:4d:10:1d:
         60:7a:32:63:e1:29:fb:c1:e4:f2:f9:98:de:02:01:6d:6b:51:
         9c:8d:2f:14:50:14:90:41:b5:47:1a:5e:c8:ce:8d:d9:2a:55:
         70:a4:4d:2f:78:97:8d:89:e0:f7:5a:94:35:de:a1:b3:cf:03:
         29:9e:5a:dd:76:aa:c0:1f:0d:99:0d:b8:cf:47:5f:96:3c:7f:
         38:4a:2e:81:6b:93:32:f0:01:4b:f6:75:b1:76:77:b3:33:01:
         4b:f8:c6:a8:b5:48:d7:2e:fb:73:23:98:f0:28:02:e6:eb:8e:
         13:6c:e6:63:b9:73:1e:22:d6:67:16:27:27:81:1a:bf:eb:da:
         eb:e5:18:60:ca:48:d8:ab:ed:06:e2:17:d8:41:97:7e:13:48:
         12:9f:40:64:53:de:62:92:f0:bf:f4:e6:87:95:5e:4e:29:e7:
         1b:d3:41:0f:3c:09:be:6e:a0:d0:f2:86:63:28:da:34:b0:7b:
         2b:51:07:16:0e:75:b9:1c:b1:98:fc:93:3a:75:19:92:42:f2:
         9f:d0:86:fb:53:59:ec:ff:72:45:28:72:20:2d:12:92:16:38:
         a1:47:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 17:05:18 2024 by rpki-client on console-fra.rpki-client.org