Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ebf2613d03df3e4f1f68484411e8929d983dd31.cer
File:                     5ebf2613d03df3e4f1f68484411e8929d983dd31.cer (raw, json)
Hash identifier:          ZvqnNcfSq3Z4mE44ZAa7BI13orAxLv3LbrdfCiQ5iYo=
Subject key identifier:   C9:38:FD:84:CE:D7:FE:FD:F4:DB:8F:E4:FC:89:BA:93:68:C1:AE:55
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0AB71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/5ebf2613d03df3e4f1f68484411e8929d983dd31.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:23 +0000
Certificate not after:    Sat 06 Apr 2024 17:07:16 +0000
Subordinate resources:    AS: 263686
                          IP: 131.161.52.0/22
                          IP: 138.59.176.0/22
                          IP: 179.63.252.0/22
                          IP: 2803:a700::/32

Validation:               Failed, certificate revoked on Wed 06 Mar 2024 18:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14723953 (0xe0ab71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:23 2017 GMT
            Not After : Apr  6 17:07:16 2024 GMT
        Subject: CN=5ebf2613d03df3e4f1f68484411e8929d983dd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1f:47:3d:4a:9e:b7:53:01:5f:ad:7a:80:c4:
                    d7:b8:24:19:17:d3:8e:8c:c9:91:e5:9c:08:69:d7:
                    93:8a:51:02:94:ff:5e:93:c6:7f:63:da:41:eb:a2:
                    5f:bb:1c:bb:ff:f4:f5:0a:f4:2a:a2:47:c5:74:d5:
                    b7:b4:14:6e:b9:60:3e:cd:15:6d:be:af:f2:87:b2:
                    ec:79:fc:1e:c0:11:7e:e4:ea:77:b5:1b:6d:7e:10:
                    47:ba:77:63:f1:86:2a:3b:71:e6:de:ca:ee:18:90:
                    95:1f:85:e2:ad:c9:26:a4:1f:39:81:e2:cd:c2:a1:
                    07:cb:59:c1:95:5a:f4:92:68:6b:31:b6:cd:03:b1:
                    c2:3d:9a:31:3c:51:f0:2b:88:1c:03:ad:4f:9e:ca:
                    95:3d:a8:be:eb:66:fb:af:66:d9:28:34:da:48:7d:
                    25:1e:ae:21:dd:f6:fa:ff:2e:53:6f:c6:74:40:09:
                    f7:7d:16:8b:5c:90:85:07:12:26:29:07:12:7f:9f:
                    28:2a:36:c9:fa:b8:0c:2b:d3:63:2d:15:c7:b4:7f:
                    0d:fd:8b:56:ee:7e:d2:01:56:64:8e:21:8f:f0:97:
                    87:35:0f:92:55:2b:d2:59:09:a7:1d:4f:1b:bc:b1:
                    32:1d:96:5a:f1:28:bf:4f:21:9d:cb:59:44:67:86:
                    a6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:38:FD:84:CE:D7:FE:FD:F4:DB:8F:E4:FC:89:BA:93:68:C1:AE:55
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b954ffb3-8beb-4974-8e26-86f18fb3d93b/5ebf2613d03df3e4f1f68484411e8929d983dd31.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.52.0/22
                  138.59.176.0/22
                  179.63.252.0/22
                IPv6:
                  2803:a700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263686

    Signature Algorithm: sha256WithRSAEncryption
         31:88:50:4e:a4:75:ff:b8:53:db:73:ed:e0:8c:c9:2b:a8:67:
         ad:58:2f:9f:16:ef:7e:db:02:c7:38:92:cd:4d:9f:a1:d8:05:
         dd:5a:6c:0a:8e:81:d8:ae:d7:6b:5d:8c:92:54:49:10:3c:68:
         44:fc:63:a0:a9:c6:42:7d:bb:9d:7d:a9:ec:7a:59:14:15:e5:
         d0:7d:4f:a3:07:30:23:14:46:e9:e7:fa:1a:39:de:ac:47:68:
         be:89:7c:ed:8c:a2:b7:b9:b5:0e:27:a5:89:f4:b2:5d:d2:db:
         ed:a2:f3:06:67:88:2e:fa:75:6b:af:fe:45:9b:cd:f0:58:52:
         f9:fd:52:2e:40:97:91:65:54:f9:30:45:59:3c:8e:6a:37:8c:
         6e:da:c0:ca:53:7b:3d:08:26:d2:9d:ca:99:fb:34:14:4d:58:
         9e:16:ab:02:cd:cf:36:14:6c:b2:d1:2c:d8:43:48:a1:06:86:
         4f:cd:b7:76:e3:4d:59:7b:72:c2:c9:2c:43:19:99:3d:22:d3:
         f5:b3:6e:50:ff:a9:80:af:69:5c:f7:5f:83:64:01:46:18:d8:
         3e:b2:9d:96:39:07:f2:ac:07:03:cb:50:42:56:34:1c:c4:87:
         75:d9:55:4f:ec:52:d0:38:ec:38:eb:20:a6:06:ae:0a:62:6b:
         aa:c4:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 22:50:07 2024 by rpki-client on console-ams.rpki-client.org