Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
File:                     657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer (raw, json)
Hash identifier:          N/37UAwoSqYLLsFUYIhCUPylsq7TDGVKyui0/E5odjA=
Subject key identifier:   58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE011B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Jan 2022 19:43:47 +0000
Certificate not after:    Fri 17 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 4926
                          AS: 10834
                          AS: 22927
                          IP: 138.219.80.0/22
                          IP: 168.226.0.0/16
                          IP: 179.36.0.0 -- 179.41.255.255
                          IP: 181.20.0.0 -- 181.27.255.255
                          IP: 186.38.0.0/15
                          IP: 186.56.0.0/13
                          IP: 186.128.0.0/13
                          IP: 190.48.0.0/14
                          IP: 190.172.0.0 -- 190.179.255.255
                          IP: 191.80.0.0 -- 191.85.255.255
                          IP: 200.0.192.0/23
                          IP: 200.0.224.0/19
                          IP: 200.5.64.0/18
                          IP: 200.5.192.0/18
                          IP: 200.9.212.0/23
                          IP: 200.9.235.0/24
                          IP: 200.10.96.0 -- 200.10.129.255
                          IP: 200.16.128.0/17
                          IP: 200.32.32.0/19
                          IP: 200.41.128.0/17
                          IP: 200.51.0.0/16
                          IP: 200.63.128.0/18
                          IP: 200.70.0.0/16
                          IP: 201.176.0.0 -- 201.181.255.255
                          IP: 201.250.0.0/15
                          IP: 201.254.0.0/15
                          IP: 209.13.0.0/16
                          IP: 2800:380::/31
                          IP: 2802:8000::/25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16646427 (0xfe011b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 13 19:43:47 2022 GMT
            Not After : Jan 17 05:00:00 2025 GMT
        Subject: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:f4:73:1f:14:27:40:37:59:15:6a:d8:21:
                    17:5d:53:57:25:9b:8e:d0:cd:ac:28:b5:02:d7:04:
                    11:45:7c:53:84:62:03:3f:65:ca:ba:9b:16:b7:ec:
                    94:4e:84:a9:09:08:7b:12:0a:7b:7e:09:f7:4f:fd:
                    1d:d2:8d:7f:af:da:8f:0e:1c:78:42:28:dd:11:5b:
                    4a:3f:92:02:8d:d9:e4:32:0c:73:22:a7:67:ad:12:
                    be:37:ae:60:c1:b2:f3:41:49:1a:2b:a1:2f:d6:af:
                    d1:8f:a6:2a:d2:38:44:eb:96:2f:85:60:6f:a9:e2:
                    3e:69:6f:5b:fb:5d:d6:e6:cf:45:29:62:6d:bd:8d:
                    70:f7:f9:29:18:d6:af:b8:9f:23:e1:7f:35:ea:7a:
                    6c:12:db:6b:f1:aa:e9:3c:e8:2e:46:6d:03:90:f7:
                    26:b2:2f:c9:ad:3b:4c:b2:b8:74:38:69:23:2c:56:
                    24:b2:d0:d7:d7:c3:a1:21:de:f7:68:36:4d:c4:3a:
                    d0:c0:3e:86:37:48:f2:c3:2f:01:c6:de:bc:47:8b:
                    1e:fc:1a:58:4c:ec:7f:a6:fe:78:94:5b:a5:8c:7e:
                    9d:c5:1f:6c:03:ff:e1:62:0c:c0:df:63:d3:a3:73:
                    29:33:f3:79:f4:43:ca:13:66:19:54:53:02:e1:8b:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.80.0/22
                  168.226.0.0/16
                  179.36.0.0-179.41.255.255
                  181.20.0.0-181.27.255.255
                  186.38.0.0/15
                  186.56.0.0/13
                  186.128.0.0/13
                  190.48.0.0/14
                  190.172.0.0-190.179.255.255
                  191.80.0.0-191.85.255.255
                  200.0.192.0/23
                  200.0.224.0/19
                  200.5.64.0/18
                  200.5.192.0/18
                  200.9.212.0/23
                  200.9.235.0/24
                  200.10.96.0-200.10.129.255
                  200.16.128.0/17
                  200.32.32.0/19
                  200.41.128.0/17
                  200.51.0.0/16
                  200.63.128.0/18
                  200.70.0.0/16
                  201.176.0.0-201.181.255.255
                  201.250.0.0/15
                  201.254.0.0/15
                  209.13.0.0/16
                IPv6:
                  2800:380::/31
                  2802:8000::/25

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4926
                  10834
                  22927

    Signature Algorithm: sha256WithRSAEncryption
         04:b8:43:13:43:b6:27:99:69:81:c4:2d:db:61:1b:06:51:c8:
         12:18:3e:c1:a1:1f:53:bb:d6:57:a5:b0:d0:4b:6f:54:9d:04:
         34:b5:0e:b2:79:1d:51:73:1d:e6:cd:ca:0b:7d:90:0b:d3:6f:
         13:e1:33:8c:61:3f:c8:75:d2:be:97:66:ee:c6:97:4c:81:4d:
         3d:4a:7d:18:1d:b8:71:5f:8d:af:ab:c5:b4:8a:97:52:2c:ce:
         c6:3a:7e:0c:11:b3:54:ea:73:3e:07:93:87:db:6c:8b:74:7c:
         0e:0c:d9:c3:1d:b1:0c:c7:c8:df:6c:d9:6b:d0:b9:f1:9d:53:
         56:41:03:28:cb:01:67:bb:90:de:bf:4a:64:db:9d:43:2b:3a:
         db:f6:5b:05:22:50:3d:05:ae:d1:85:8f:3c:7e:bc:ee:cd:91:
         fa:66:e2:8d:1a:9d:6d:31:df:48:d9:3f:57:2c:b6:9f:db:17:
         61:7c:59:cc:59:56:e2:49:c4:68:d4:2c:cf:bd:5a:43:c3:f2:
         9f:9c:a5:57:e6:99:e8:ee:0f:87:01:f7:e0:3b:8d:bd:1b:d8:
         c0:0b:8e:99:f8:ae:ea:d9:ac:8e:f0:c5:2c:fc:c2:02:34:9e:
         65:57:8c:c2:33:ec:af:b0:e0:bb:b4:90:c0:fc:3a:b0:46:bc:
         d2:d4:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 16:47:52 2023 by rpki-client on console-fra.rpki-client.org