Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
File:                     7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer (raw, json)
Hash identifier:          tE7vVZr3AO0RYf0w62daD31+LfI6VOT0yt69ynItdIY=
Subject key identifier:   E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01074FF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:35 +0000
Certificate not after:    Tue 05 Aug 2025 06:00:00 +0000
Subordinate resources:    AS: 28000 -- 28002
                          AS: 28119
                          AS: 52224
                          AS: 264845 -- 264846
                          IP: 45.6.248.0/21
                          IP: 168.121.184.0/22
                          IP: 170.247.168.0/22
                          IP: 179.0.156.0/22
                          IP: 190.112.52.0/22
                          IP: 200.0.86.0 -- 200.0.88.255
                          IP: 200.3.12.0/22
                          IP: 200.7.84.0/22
                          IP: 200.10.60.0/22
                          IP: 2001:13c7:7001:: -- 2001:13c7:7003:ffff:ffff:ffff:ffff:ffff
                          IP: 2001:13c7:7010::/46
                          IP: 2001:13c7:7020::/44
                          IP: 2801::/48
                          IP: 2801:1b8::/43

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 21:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17256438 (0x1074ff6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:35 2017 GMT
            Not After : Aug  5 06:00:00 2025 GMT
        Subject: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:53:64:9a:63:dd:25:9f:d3:a9:16:8c:3e:14:
                    a8:ad:95:53:d9:96:9e:6f:2e:a8:7b:4e:7f:e9:f7:
                    d1:eb:26:7c:8e:f5:01:bf:b2:4f:23:25:2f:91:17:
                    d3:8e:9e:7c:89:ac:6f:b0:c6:2b:cd:42:bb:c5:9f:
                    30:6e:23:c2:5e:38:1d:b9:3e:9b:64:6e:fb:3e:72:
                    f2:c7:b6:1a:4a:4c:7f:c8:e5:6e:04:68:49:3a:a1:
                    8e:7e:79:cd:d8:c6:c9:2d:78:9e:e0:86:39:a9:80:
                    5c:84:d9:92:ff:ed:1a:5e:2b:e7:43:26:85:71:5d:
                    4d:46:e2:79:8c:07:19:91:d4:87:ca:4f:8a:5a:7e:
                    41:aa:6a:33:d1:6a:b6:53:43:22:fe:15:05:54:f9:
                    64:c6:40:20:2f:a5:92:b1:83:be:6c:7c:8e:cf:15:
                    24:dd:9d:90:ae:3c:4c:35:24:7e:43:97:37:7f:93:
                    3f:57:ed:9b:de:04:dc:21:a2:85:68:14:28:f2:45:
                    4b:e7:ed:6b:31:df:5c:fd:e3:3c:2c:3d:1d:5d:d0:
                    0c:6d:0a:34:6c:6e:2d:2b:89:5f:09:f4:a8:23:7a:
                    17:0e:84:1f:05:20:10:3c:bb:ac:6e:42:92:47:2c:
                    f2:8a:7b:7e:8f:1b:1a:f1:2e:c7:f1:99:ed:96:0d:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/21
                  168.121.184.0/22
                  170.247.168.0/22
                  179.0.156.0/22
                  190.112.52.0/22
                  200.0.86.0-200.0.88.255
                  200.3.12.0/22
                  200.7.84.0/22
                  200.10.60.0/22
                IPv6:
                  2001:13c7:7001::-2001:13c7:7003:ffff:ffff:ffff:ffff:ffff
                  2001:13c7:7010::/46
                  2001:13c7:7020::/44
                  2801::/48
                  2801:1b8::/43

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28000-28002
                  28119
                  52224
                  264845-264846

    Signature Algorithm: sha256WithRSAEncryption
         9f:e1:77:63:fa:44:72:1c:6b:79:02:64:cd:3c:cd:04:77:16:
         24:67:a5:ad:65:a2:fd:3b:5d:9e:dd:63:8f:a2:8f:10:c4:f8:
         06:55:85:5d:10:56:e2:36:ec:ba:83:75:cb:39:d4:da:53:4c:
         0c:6b:2c:fc:2b:0f:14:f8:d2:2b:dc:33:07:4b:59:a1:32:6a:
         ba:a5:60:b5:83:d8:04:c8:4e:9f:73:ae:d3:cc:e1:06:3f:da:
         9b:c2:4e:3f:1f:d2:0a:a1:b0:6c:a9:3d:ea:56:96:cc:a2:9c:
         44:79:7f:24:54:87:80:3f:2f:ff:05:63:01:22:0e:d7:57:23:
         5b:03:83:cc:e6:52:23:b9:34:5e:4e:96:40:ce:49:cb:c3:a0:
         26:95:f9:2d:85:a3:5d:71:2d:19:63:83:ee:12:b9:a5:28:93:
         d5:a4:ca:45:f3:1c:da:8e:3a:d4:83:72:dc:8a:cc:3b:3e:9b:
         3f:da:51:b8:df:6d:da:b4:0a:40:22:88:7b:60:c8:2f:7e:11:
         bc:08:03:6a:3f:09:b9:6f:8a:3f:7c:ca:a1:f1:87:0c:c2:88:
         1a:2d:85:99:51:5c:24:8c:f7:56:4b:12:fe:90:fd:d3:7c:5d:
         e2:f0:1e:39:7b:ba:87:59:b3:1d:fb:de:fb:c4:8b:d3:42:8b:
         2a:a2:ca:5b
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIEAQdP9jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczNVoXDTI1MDgwNTA2MDAw
MFowMzExMC8GA1UEAxMoN2MwZjMxNGMxZDNhZThjOGZiZDY5ZjljMzE2MzM5NzI0
M2Y4NzY2ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIBTZJpj3SWf
06kWjD4UqK2VU9mWnm8uqHtOf+n30esmfI71Ab+yTyMlL5EX046efImsb7DGK81C
u8WfMG4jwl44Hbk+m2Ru+z5y8se2GkpMf8jlbgRoSTqhjn55zdjGyS14nuCGOamA
XITZkv/tGl4r50MmhXFdTUbieYwHGZHUh8pPilp+QapqM9FqtlNDIv4VBVT5ZMZA
IC+lkrGDvmx8js8VJN2dkK48TDUkfkOXN3+TP1ftm94E3CGihWgUKPJFS+ftazHf
XP3jPCw9HV3QDG0KNGxuLSuJXwn0qCN6Fw6EHwUgEDy7rG5Ckkcs8op7fo8bGvEu
x/GZ7ZYNsiECAwEAAaOCA48wggOLMB0GA1UdDgQWBBTnD5BxGitxkN9arXNBFj36
4VgsKDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdk
LTQyMWQtYjQ1Yi05YWMyYjdjZWQyMDkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00
MjFkLWI0NWItOWFjMmI3Y2VkMjA5LzdjMGYzMTRjMWQzYWU4YzhmYmQ2OWY5YzMx
NjMzOTcyNDNmODc2NmUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
mQYIKwYBBQUHAQcBAf8EgYkwgYYwRAQCAAEwPgMEAy0G+AMEAqh5uAMEAqr3qAME
ArMAnAMEAr5wNDAMAwQByABWAwQAyABYAwQCyAMMAwQCyAdUAwQCyAo8MD4EAgAC
MDgwEgMHACABE8dwAQMHAiABE8dwAAMHAiABE8dwEAMHBCABE8dwIAMHACgBAAAA
AAMHBSgBAbgAADA0BggrBgEFBQcBCAEB/wQlMCOgITAfMAgCAm1gAgJtYgICbdcC
AwDMADAKAgMECo0CAwQKjjANBgkqhkiG9w0BAQsFAAOCAQEAn+F3Y/pEchxreQJk
zTzNBHcWJGelrWWi/Ttdnt1jj6KPEMT4BlWFXRBW4jbsuoN1yznU2lNMDGss/CsP
FPjSK9wzB0tZoTJquqVgtYPYBMhOn3Ou08zhBj/am8JOPx/SCqGwbKk96laWzKKc
RHl/JFSHgD8v/wVjASIO11cjWwODzOZSI7k0Xk6WQM5Jy8OgJpX5LYWjXXEtGWOD
7hK5pSiT1aTKRfMc2o461INy3IrMOz6bP9pRuN9t2rQKQCKIe2DIL34RvAgDaj8J
uW+KP3zKofGHDMKIGi2FmVFcJIz3VksS/pD903xd4vAeOXu6h1mzHfve+8SL00KL
KqLKWw==
-----END CERTIFICATE-----
Generated at Fri Feb 16 02:55:53 2024 by rpki-client on console-fra.rpki-client.org