Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
File: b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer (raw, json)
Hash identifier: Y/sDEXc7EdZiYjGEOunLvIzxk5PmQFTcU5AC1UY4BOs=
Subject key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: 010BEEF0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 04 Apr 2023 18:41:00 +0000
Certificate not after: Fri 01 Aug 2025 06:00:00 +0000
Subordinate resources: AS: 6503
AS: 14000
IP: 148.240.0.0/16
IP: 148.243.0.0/16
IP: 148.245.0.0/16
IP: 187.162.0.0 -- 187.167.255.255
IP: 187.176.0.0 -- 187.179.127.255
IP: 189.205.0.0/16
IP: 189.207.0.0 -- 189.213.255.255
IP: 200.23.72.0/23
IP: 200.23.147.0/24
IP: 200.33.192.0/21
IP: 200.33.208.0 -- 200.33.231.255
IP: 200.34.64.0/19
IP: 200.34.141.0/24
IP: 200.36.96.0/19
IP: 200.38.64.0/19
IP: 200.38.224.0/19
IP: 200.39.224.0/19
IP: 200.52.0.0/20
IP: 200.52.32.0/19
IP: 200.56.0.0 -- 200.56.95.255
IP: 200.57.96.0/19
IP: 200.57.192.0/18
IP: 200.76.192.0/19
IP: 200.78.128.0/17
IP: 200.94.192.0/19
IP: 200.188.0.0/17
IP: 200.194.0.0/18
IP: 200.236.64.0/18
IP: 201.140.0.0/18
IP: 201.156.0.0/16
IP: 201.158.128.0/17
IP: 207.249.128.0/18
IP: 2806::/28
Validation: Failed, certificate revoked on Fri 15 Mar 2024 12:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17559280 (0x10beef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Apr 4 18:41:00 2023 GMT
Not After : Aug 1 06:00:00 2025 GMT
Subject: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:a2:fe:97:55:b9:c0:1f:6e:79:f9:a8:96:
cf:ac:fd:cc:88:70:08:2b:77:4d:87:01:4b:20:1d:
09:52:c6:07:2b:b2:7c:03:d7:68:57:c3:af:70:6d:
0f:0b:7f:7b:c1:87:5b:db:44:50:9b:44:84:b4:46:
5a:18:27:0f:1a:31:f9:ef:aa:be:5d:96:fa:6e:d6:
a6:21:b5:a9:dd:09:40:c5:83:3b:bb:88:21:dd:df:
c7:0a:2e:49:3f:d9:82:cb:74:ca:21:58:81:bb:ad:
97:6b:87:99:d2:6f:48:57:2f:35:fe:28:41:a0:32:
ab:24:e6:10:bd:3e:27:06:9c:17:b7:aa:04:5e:ea:
cf:d6:22:de:db:3a:c4:08:d6:ff:91:6a:f0:d9:97:
60:4d:74:e2:f5:2b:f9:c9:1b:f4:34:4f:c1:0b:60:
8b:1d:da:7e:e4:e1:97:ed:86:68:39:20:80:32:b2:
08:c8:10:ed:56:44:a5:e7:02:4b:d3:62:3e:eb:86:
63:0e:5a:03:d5:3c:1a:10:3d:77:71:af:58:7a:0e:
aa:55:6d:19:0c:9f:7b:1b:ef:f8:e1:57:3a:dc:3e:
b9:d3:1c:a4:26:18:35:1b:e1:bf:16:91:ec:ef:75:
30:ae:90:fe:9f:c0:29:8b:58:46:ef:b5:79:18:1a:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.240.0.0/16
148.243.0.0/16
148.245.0.0/16
187.162.0.0-187.167.255.255
187.176.0.0-187.179.127.255
189.205.0.0/16
189.207.0.0-189.213.255.255
200.23.72.0/23
200.23.147.0/24
200.33.192.0/21
200.33.208.0-200.33.231.255
200.34.64.0/19
200.34.141.0/24
200.36.96.0/19
200.38.64.0/19
200.38.224.0/19
200.39.224.0/19
200.52.0.0/20
200.52.32.0/19
200.56.0.0-200.56.95.255
200.57.96.0/19
200.57.192.0/18
200.76.192.0/19
200.78.128.0/17
200.94.192.0/19
200.188.0.0/17
200.194.0.0/18
200.236.64.0/18
201.140.0.0/18
201.156.0.0/16
201.158.128.0/17
207.249.128.0/18
IPv6:
2806::/28
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6503
14000
Signature Algorithm: sha256WithRSAEncryption
ad:fc:9f:af:2a:34:53:c4:ea:be:f7:9f:ff:6c:e4:10:fa:1b:
5c:54:f9:91:4c:25:a7:7b:1c:78:eb:90:7e:b4:ba:11:c3:e7:
c7:dd:30:93:b8:7c:db:6f:ed:1c:86:1c:de:57:5d:72:df:ed:
f3:9d:eb:4b:d2:5b:cd:fc:df:fb:25:e8:3f:bc:18:5d:8f:7a:
de:14:d3:9f:7e:b7:c6:45:7c:c1:95:13:9f:95:33:c5:35:09:
96:0d:00:5f:85:3c:1d:a8:1e:7b:d2:fe:e2:1f:4c:25:87:4f:
78:e6:77:de:68:cd:e0:a8:6d:4c:5f:6a:8c:c3:2d:d4:a9:f3:
26:c7:78:c1:54:b8:33:fb:40:5b:85:86:0a:d4:5c:d5:17:72:
56:4f:96:32:00:2b:b7:78:75:0b:66:17:45:e4:03:bc:5e:b7:
2d:bb:2e:2c:68:48:4c:99:f1:5f:5e:42:5d:bf:8d:4f:66:9a:
b8:14:67:4c:b8:f3:8c:d7:05:2b:98:14:ec:ca:97:4e:a4:31:
2a:f9:9e:40:96:15:4b:a2:44:e7:32:8f:84:05:7e:d3:27:83:
b2:42:06:51:af:d8:e3:94:31:2d:32:4c:ea:0a:fd:82:22:12:
25:6a:fd:af:f9:93:17:41:c5:40:6e:19:54:98:3d:48:ce:be:
b8:be:ac:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 15 16:15:27 2024 by rpki-client on console-ams.rpki-client.org