Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
File: 61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer (raw, json)
Hash identifier: fEcPWZ+IvgNL13KjXMzrrG8IZIWb+Y3uO8ai1pL8vHk=
Subject key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: D815A0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 17 Nov 2017 18:36:52 +0000
Certificate not after: Mon 25 Dec 2023 14:00:00 +0000
Subordinate resources: IP: 190.242.0.0/16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14161312 (0xd815a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Nov 17 18:36:52 2017 GMT
Not After : Dec 25 14:00:00 2023 GMT
Subject: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:73:94:3b:2a:1b:31:4d:9d:02:2d:0d:87:68:
b8:f0:7b:24:f4:1d:b8:e0:18:f1:da:a5:51:b5:5c:
e3:90:84:6c:20:34:65:85:4f:c9:38:56:b2:4e:91:
17:35:12:e8:da:59:78:8e:d1:30:43:7d:3c:3b:05:
ca:86:41:0a:00:2a:0e:86:26:17:32:57:87:ef:16:
fe:70:d0:8b:fd:97:52:dd:99:64:60:87:c2:a3:45:
a5:db:98:9f:32:75:5f:be:4a:df:ed:08:96:59:4e:
4e:7b:f3:73:84:dc:dd:19:0e:b6:98:aa:e0:5f:e2:
86:8c:0c:ef:1f:38:f6:89:32:87:8a:3a:78:92:c5:
3b:48:4b:58:9c:86:e4:19:cd:cd:be:19:02:40:64:
e7:7c:0e:c6:9b:93:0f:81:94:70:38:54:64:3c:82:
55:e5:1c:b2:60:56:a3:68:8c:74:dc:51:cc:6f:24:
0d:61:81:7a:94:7e:57:6c:28:6e:b2:dd:9f:bf:71:
30:71:0e:37:e8:6b:12:68:86:6e:cb:e8:e2:b2:59:
4e:eb:07:1f:96:76:b4:af:50:71:dd:94:3f:3b:5b:
85:10:81:12:8f:fe:af:13:fc:f6:58:00:b0:ac:eb:
11:8a:26:6b:07:3b:87:a0:55:2f:90:02:17:41:4f:
b1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:12:90:bf:84:9c:f4:7d:e0:b3:a0:52:44:87:f6:d1:69:6d:
9d:5b:94:d9:0d:bc:b5:bb:9c:2c:d2:92:7c:79:10:ca:cc:92:
45:80:43:d1:54:a9:98:0a:00:18:19:a8:9c:8f:b4:e2:e1:73:
2b:d8:8b:41:69:02:62:05:9b:eb:29:5e:aa:2a:5d:bd:09:8f:
f2:8f:81:17:23:85:6c:33:a0:62:24:2e:23:83:d2:be:f7:7e:
83:fe:50:05:61:63:a8:74:8e:00:46:6e:94:8e:c5:6d:04:31:
29:2b:9d:56:d5:ee:6f:d4:77:bf:4a:6e:e1:8e:6f:23:ca:c2:
b4:98:d9:b1:ba:47:ca:97:8c:21:a8:a6:e1:17:06:06:65:a8:
a8:53:83:07:7e:43:f2:60:ab:8d:cf:c6:cb:65:05:a5:e2:f7:
24:4b:97:0e:47:3c:ef:83:05:74:c6:f8:97:9d:4f:a1:96:0f:
e0:82:32:6b:52:4e:10:50:7d:47:ca:de:a5:36:28:af:d5:f8:
be:35:ec:89:13:15:64:a6:67:fb:92:ce:dc:20:7d:4f:85:c6:
e5:aa:89:9c:0d:f1:17:a7:f1:71:73:36:c1:23:92:b5:ff:b4:
66:a4:be:8b:4e:4a:ff:18:c9:27:83:85:07:aa:1f:88:95:fd:
1d:a9:c7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:07:04 2024 by rpki-client on console-fra.rpki-client.org