Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
File:                     7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer (raw, json)
Hash identifier:          ngssdinsWWmq0PWv5fRrnh2fmZi/+lYGJoc2Ggfwvj4=
Subject key identifier:   14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100B208
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:31 +0000
Certificate not after:    Tue 29 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 10697
                          IP: 190.110.224.0/23
                          IP: 190.110.229.0 -- 190.110.255.255
                          IP: 190.114.96.0/19
                          IP: 200.50.160.0/19
                          IP: 200.123.32.0 -- 200.123.53.255
                          IP: 200.123.55.0 -- 200.123.63.255
                          IP: 2800:820::/32

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16822792 (0x100b208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:31 2017 GMT
            Not After : Apr 29 06:00:00 2025 GMT
        Subject: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:65:2a:a9:b1:00:a8:28:8e:10:a1:c9:62:
                    20:4d:13:29:dd:8d:00:ed:02:cc:b4:c8:f0:3f:5d:
                    01:0c:52:66:ab:84:f3:07:4b:80:bd:32:10:48:36:
                    37:fb:2b:72:d6:e6:21:e4:de:8b:04:3b:ca:74:6f:
                    2f:dd:12:69:df:90:ac:a1:fc:64:68:64:fc:7c:86:
                    c9:a0:90:57:15:a5:cc:84:a1:83:fa:11:89:2e:0d:
                    87:e5:14:82:93:9a:e8:c9:9b:2c:71:2f:65:c9:5c:
                    84:f4:c3:03:bf:24:1e:e1:8d:b7:51:d7:b3:bd:10:
                    6b:7f:a5:98:4b:8b:19:32:cf:34:6d:1f:89:8b:16:
                    93:88:99:84:ab:fd:d5:79:86:61:b8:b0:29:cc:a0:
                    c6:df:ae:3b:99:74:fa:50:b3:f7:3e:4b:97:c8:ae:
                    c5:cd:1a:32:14:47:3e:f7:86:da:b1:37:f2:77:5c:
                    88:f4:3f:c5:73:88:eb:29:fc:a2:ed:d9:a5:3a:0c:
                    fe:80:d6:ff:0c:15:7c:5c:d6:44:3e:ab:85:36:2b:
                    e2:02:8c:6e:15:aa:df:5e:c3:45:0f:14:45:1f:12:
                    7b:c7:3a:4b:95:2e:c3:0f:f6:f5:74:63:1b:85:db:
                    c1:0c:c1:89:55:ac:b4:0a:a8:e6:c9:f5:b6:54:6d:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.224.0/23
                  190.110.229.0-190.110.255.255
                  190.114.96.0/19
                  200.50.160.0/19
                  200.123.32.0-200.123.53.255
                  200.123.55.0-200.123.63.255
                IPv6:
                  2800:820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10697

    Signature Algorithm: sha256WithRSAEncryption
         b9:b3:f9:71:3b:bd:c4:c7:01:57:b3:b9:2f:6b:2d:25:c2:54:
         95:b2:06:39:d7:1f:6e:dc:08:b7:42:b0:14:75:88:19:dc:cf:
         55:1b:55:31:16:5a:5c:a6:75:b0:70:93:f2:01:a8:3b:5a:c9:
         24:9c:6b:e2:72:67:4e:4b:48:20:01:a0:ef:48:fd:72:86:98:
         8f:67:bc:ec:3b:b8:b4:16:b9:79:13:46:d4:f9:e3:28:45:e1:
         f4:74:c3:b3:81:b3:90:6e:cf:ee:d0:bb:06:cb:63:29:a4:6b:
         a2:3f:58:34:49:49:e9:68:28:72:00:bf:8b:91:75:5d:af:9c:
         bc:9a:03:74:43:b3:df:1f:56:26:df:e6:5f:06:1d:b9:c5:d6:
         04:b2:97:f0:2b:c1:56:47:1e:98:02:64:8f:be:bd:7c:aa:6b:
         12:b2:f7:92:16:7f:6c:60:d3:6d:f7:f5:c2:18:5c:49:74:e8:
         31:f8:7d:f6:c6:eb:81:b6:5e:77:5f:40:a1:a7:ae:35:ed:aa:
         99:01:92:9b:a8:ea:04:7c:23:53:4a:6a:a3:fd:34:a2:c5:04:
         63:25:f1:ce:73:97:da:9b:b3:cb:ef:3c:2b:7d:31:32:e6:49:
         21:20:7c:69:5c:9d:54:fa:43:6c:29:cf:01:c7:3a:6e:00:18:
         77:71:0e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:53 2024 by rpki-client on console-fra.rpki-client.org