Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.cer
File: 6af5832d0aca6d2bfb240d2006f0cb7be7893abb.cer (raw, json)
Hash identifier: 5y2TDDu9dNnSkPtBP8Zw9Nx5T+nAqAKh8U7/T6Tlanw=
Subject key identifier: 88:C3:5F:75:02:5E:33:35:D2:29:3B:7A:7D:AB:EA:13:1D:0A:E4:D5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: E3A00B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 04 Apr 2023 18:41:00 +0000
Certificate not after: Thu 01 Aug 2024 06:00:00 +0000
Subordinate resources: AS: 6503
AS: 14000
IP: 148.240.0.0/16
IP: 148.243.0.0/16
IP: 148.245.0.0/16
IP: 187.162.0.0 -- 187.167.255.255
IP: 187.176.0.0 -- 187.179.159.255
IP: 189.205.0.0/16
IP: 189.207.0.0 -- 189.213.255.255
IP: 200.23.72.0/23
IP: 200.23.147.0/24
IP: 200.33.192.0/21
IP: 200.33.208.0 -- 200.33.231.255
IP: 200.34.64.0/19
IP: 200.34.141.0/24
IP: 200.36.96.0/19
IP: 200.38.64.0/19
IP: 200.38.224.0/19
IP: 200.39.224.0/19
IP: 200.52.0.0/20
IP: 200.52.32.0/19
IP: 200.56.0.0 -- 200.56.95.255
IP: 200.57.96.0/19
IP: 200.57.192.0/18
IP: 200.76.192.0/19
IP: 200.78.128.0/17
IP: 200.94.192.0/19
IP: 200.188.0.0/17
IP: 200.194.0.0/18
IP: 200.236.64.0/18
IP: 201.140.0.0/18
IP: 201.156.0.0/16
IP: 201.158.128.0/17
IP: 207.249.128.0/18
IP: 2806::/28
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14917643 (0xe3a00b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Apr 4 18:41:00 2023 GMT
Not After : Aug 1 06:00:00 2024 GMT
Subject: CN=6af5832d0aca6d2bfb240d2006f0cb7be7893abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f9:2f:f8:3c:ae:51:e8:c8:20:cb:94:a4:f6:
fd:a6:21:86:d6:18:0e:42:3a:34:5a:25:d0:38:4f:
05:f2:eb:db:84:11:a1:e8:a9:0c:63:a0:65:b4:16:
c2:04:6f:89:54:38:91:16:54:1b:66:b2:6b:15:de:
02:ac:10:0a:10:3c:a9:f6:ac:98:32:75:22:0b:dc:
8f:25:f9:50:1f:47:6e:9f:b2:b1:c5:98:28:52:e0:
08:e7:da:7f:a5:e9:cb:05:54:9d:da:8d:9c:82:54:
f7:40:ef:21:b9:38:cc:9f:db:bf:98:62:30:8d:e9:
62:b4:ea:b3:c5:34:8b:6d:d6:38:42:19:2b:3f:30:
26:ad:44:22:6d:a0:94:65:79:5e:4b:36:ee:8b:8e:
fd:b1:81:ac:d1:99:e2:22:6f:7d:ed:bd:f8:85:70:
e7:00:00:98:f9:ef:fd:46:b5:32:96:7e:58:e8:28:
99:a3:74:b5:9a:11:5d:5f:2c:54:62:b8:9c:d0:99:
fa:34:51:b9:97:d1:5f:d9:2c:39:65:b5:e8:df:91:
1a:81:f4:db:0b:58:81:32:3a:d9:80:8a:59:91:6c:
69:6a:13:d0:40:fb:45:0a:3b:73:65:a2:01:f7:25:
b5:8a:d0:66:ba:06:60:37:66:21:75:2b:32:b2:91:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:5F:75:02:5E:33:35:D2:29:3B:7A:7D:AB:EA:13:1D:0A:E4:D5
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.240.0.0/16
148.243.0.0/16
148.245.0.0/16
187.162.0.0-187.167.255.255
187.176.0.0-187.179.159.255
189.205.0.0/16
189.207.0.0-189.213.255.255
200.23.72.0/23
200.23.147.0/24
200.33.192.0/21
200.33.208.0-200.33.231.255
200.34.64.0/19
200.34.141.0/24
200.36.96.0/19
200.38.64.0/19
200.38.224.0/19
200.39.224.0/19
200.52.0.0/20
200.52.32.0/19
200.56.0.0-200.56.95.255
200.57.96.0/19
200.57.192.0/18
200.76.192.0/19
200.78.128.0/17
200.94.192.0/19
200.188.0.0/17
200.194.0.0/18
200.236.64.0/18
201.140.0.0/18
201.156.0.0/16
201.158.128.0/17
207.249.128.0/18
IPv6:
2806::/28
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6503
14000
Signature Algorithm: sha256WithRSAEncryption
87:fc:e2:a0:55:6f:2f:e0:5f:a2:42:a5:ad:b5:ab:fb:d7:6b:
f8:9c:dc:c3:21:99:1e:bc:b8:88:6f:dd:11:40:11:51:78:06:
bd:fa:7d:d5:71:45:4b:f1:09:91:b8:03:fe:7d:27:9b:f8:66:
8a:d4:b7:a2:c9:02:20:ec:f3:bd:58:a6:09:d9:d4:c1:9a:81:
e7:82:ce:ff:28:4d:7f:40:9b:1d:ef:bd:05:da:f5:c5:0e:bc:
9f:21:08:7a:dc:15:f7:9b:b7:cf:fd:21:4e:7a:13:50:3f:78:
3d:a0:cb:c6:ad:c8:ed:c3:39:6f:b5:51:9a:85:39:b3:04:aa:
ef:e1:c6:a9:df:5f:02:74:a3:06:2b:d1:3a:df:d2:72:e3:64:
f5:d5:90:34:a1:c7:fe:07:cc:b1:f3:ae:9f:70:68:1e:de:16:
5b:f2:ec:7c:20:7e:73:2e:94:2d:12:dd:e3:f4:8f:fd:42:69:
2a:6e:fc:d8:09:a8:8f:bc:ef:84:b3:7f:b2:72:1c:84:66:77:
0b:92:75:d7:79:a7:8c:7e:d8:c3:15:b0:92:73:05:b7:da:ef:
50:c4:96:a6:6c:c0:6b:ee:0a:01:d8:14:61:7b:cc:fe:8a:06:
1f:f7:db:93:4e:e9:e5:43:e7:e9:9c:9f:cb:a5:1e:ee:4e:13:
39:92:26:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 8 20:55:52 2023 by rpki-client on console-fra.rpki-client.org