Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dd894024e79ebcc0c2f899c8d0885648f794bcc.cer
File:                     6dd894024e79ebcc0c2f899c8d0885648f794bcc.cer (raw, json)
Hash identifier:          94YpVrrqGSaE4LbLFpB5LtFrPtUtQAreneZTgO4sxJI=
Subject key identifier:   AD:8B:25:8F:C8:34:89:AF:B0:62:DE:7C:42:A1:B4:B5:0B:42:5D:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D41DA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7b5e4a51-14bb-490a-90a9-586e15eb5176/6dd894024e79ebcc0c2f899c8d0885648f794bcc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7b5e4a51-14bb-490a-90a9-586e15eb5176/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 09 Oct 2020 16:18:09 +0000
Certificate not after:    Mon 06 Nov 2023 16:22:39 +0000
Subordinate resources:    IP: 2801:1b2::/44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13901219 (0xd41da3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 16:18:09 2020 GMT
            Not After : Nov  6 16:22:39 2023 GMT
        Subject: CN=6dd894024e79ebcc0c2f899c8d0885648f794bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a6:b2:a2:af:f3:3d:d4:45:18:79:ac:c7:72:
                    bc:10:d0:d6:8d:74:05:8f:58:c7:4f:4f:c9:09:09:
                    33:43:c8:de:fe:62:10:11:95:c6:a5:16:07:e1:37:
                    e2:b0:f3:37:c4:c4:56:df:0b:13:34:fd:c7:7a:05:
                    af:66:3b:5b:94:41:92:cf:7e:97:fa:30:e7:27:5f:
                    6a:e3:d9:b1:ab:f3:e5:56:cf:58:4d:ba:59:3d:f3:
                    cb:be:83:7f:0c:4f:70:5d:ab:ad:b2:8a:7a:32:97:
                    73:7f:b4:57:5f:c1:e5:77:c0:95:9b:42:45:d9:34:
                    d7:dc:b5:6d:71:3d:8d:52:1d:47:1b:6f:d4:39:fa:
                    b9:8f:b7:c0:f8:a2:02:8a:0d:8d:7c:8e:7d:b4:eb:
                    b3:8a:dc:f6:c2:7e:fe:ae:a5:50:16:15:10:64:9f:
                    37:d5:d5:0b:37:97:d3:93:9a:f6:54:72:c7:49:ce:
                    66:99:20:9c:b7:cc:22:20:ab:34:a1:17:6a:f6:05:
                    9a:21:1b:61:41:87:9a:4e:1f:27:8c:44:5f:69:95:
                    eb:47:75:30:91:56:a0:b8:e4:76:6f:87:27:0e:50:
                    4b:27:80:eb:b1:97:e8:e6:e5:e6:ea:3c:bf:91:ec:
                    92:fa:10:91:fe:3e:bf:33:2e:e1:ae:1f:58:05:4f:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8B:25:8F:C8:34:89:AF:B0:62:DE:7C:42:A1:B4:B5:0B:42:5D:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7b5e4a51-14bb-490a-90a9-586e15eb5176/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7b5e4a51-14bb-490a-90a9-586e15eb5176/6dd894024e79ebcc0c2f899c8d0885648f794bcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b2::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:ba:86:b0:22:1d:23:12:49:ea:e8:ac:8f:97:68:ff:2f:c9:
         a3:14:fa:95:00:1c:55:14:e8:01:66:d9:88:a9:ff:9d:5e:cc:
         c1:57:b1:01:97:cf:64:06:a7:9a:ba:c1:fe:ab:e9:ac:32:9d:
         12:57:c0:76:c9:b3:47:23:db:2d:ef:bb:7c:e0:aa:33:0e:3e:
         88:19:0f:fc:53:1a:6d:a7:13:81:d4:3e:40:e9:05:45:f6:5c:
         13:df:9a:3c:a7:b1:ec:d8:10:88:db:ff:cc:8b:1e:2e:95:63:
         10:2b:a5:be:12:a4:80:a5:87:55:35:e7:04:96:fa:ca:d8:c0:
         0a:f0:4f:65:5a:35:1a:6e:ee:a9:d9:4f:79:93:b1:3a:45:ce:
         93:9a:ca:52:67:e9:16:e8:32:c8:95:5e:79:92:fa:c0:9e:9f:
         2a:cb:0d:52:c2:00:cf:99:21:8a:f8:c8:14:f9:b6:2b:15:72:
         c9:65:1f:3a:65:25:35:1c:1a:a7:86:b5:bc:39:15:28:06:c5:
         66:34:e9:ad:2d:3b:ad:cf:73:ad:f0:f2:37:6f:39:14:db:61:
         b6:1a:a8:0b:87:a2:d8:4c:f3:56:35:d5:f7:ad:f3:e7:9b:3e:
         b2:0d:24:29:9a:4b:46:88:fc:53:f5:89:db:06:e9:8b:0a:a6:
         76:84:94:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-ams.rpki-client.org