Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
File:                     b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer (raw, json)
Hash identifier:          8ZyxrLRjermwq1KSkkY3d6eXOIf+icKU2p9Ztu00Zgw=
Subject key identifier:   81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01006565
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:31 +0000
Certificate not after:    Tue 29 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 10697
                          IP: 190.110.224.0/23
                          IP: 190.110.229.0 -- 190.110.255.255
                          IP: 190.114.96.0/19
                          IP: 200.50.160.0/19
                          IP: 200.123.32.0/19
                          IP: 2800:820::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16803173 (0x1006565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:31 2017 GMT
            Not After : Apr 29 06:00:00 2025 GMT
        Subject: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:54:f8:b0:28:84:45:f0:05:f5:17:6d:6b:
                    8c:be:d6:65:d0:5d:d0:79:13:ee:8a:f0:40:ac:21:
                    95:8e:d9:63:a2:3b:f5:15:2e:91:6d:59:9d:92:e7:
                    6e:1a:a7:a4:1f:60:fb:fa:ec:c5:ac:e8:43:08:3b:
                    0d:5f:cb:5b:dd:ca:51:c6:ec:21:06:a2:11:6d:a4:
                    66:64:0e:b4:bd:39:f8:36:96:b8:7b:24:09:34:e1:
                    7d:e8:5b:1e:76:f1:5e:b2:d3:e3:d5:c3:9d:2a:6d:
                    d7:ad:ac:93:ca:83:15:20:5c:be:4d:1e:c2:3f:53:
                    0b:f9:c1:d2:f3:72:87:1a:30:bc:d7:73:4a:22:4d:
                    56:58:9d:42:c6:c9:97:81:23:66:89:b4:c6:23:0c:
                    85:9b:28:ef:4c:c8:20:80:ff:7a:08:7e:f8:53:78:
                    ca:ed:cf:10:d6:7d:25:5a:55:96:ff:7f:9c:cc:31:
                    be:a6:d2:c1:d1:72:c9:2b:2e:3f:81:5c:39:2b:ac:
                    23:11:c4:4a:da:4b:cd:b7:58:29:80:9c:0f:64:7a:
                    82:3e:b3:22:d3:2c:fc:ba:40:e5:72:41:20:da:88:
                    16:6a:7d:12:1d:11:1f:b6:73:16:d8:16:27:44:b0:
                    37:fd:8a:45:29:4d:73:09:c5:96:3f:e8:a1:40:75:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.224.0/23
                  190.110.229.0-190.110.255.255
                  190.114.96.0/19
                  200.50.160.0/19
                  200.123.32.0/19
                IPv6:
                  2800:820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10697

    Signature Algorithm: sha256WithRSAEncryption
         0e:c7:78:22:3f:00:a2:67:51:ad:9f:dc:3a:ab:6d:36:2d:38:
         f9:67:e9:c1:5f:05:e9:50:4e:f8:81:13:16:05:8c:d6:ea:3d:
         fa:7d:92:22:57:b5:10:ef:e5:96:14:fa:48:c7:e0:12:15:d9:
         ee:34:0e:7b:d1:53:a0:a8:27:41:86:1d:46:aa:b6:e9:9d:8e:
         d2:84:f2:43:50:59:76:ee:6a:95:e4:bd:bf:9c:fe:bb:33:05:
         2e:e4:a1:89:c6:e7:65:b8:3e:ca:bf:50:43:e2:76:66:ca:06:
         a8:f1:07:34:5a:8e:c4:7a:f7:91:95:94:6e:f5:75:1e:8d:e2:
         ee:8d:a3:c0:4b:f5:04:8b:f3:5a:27:0f:79:a5:ef:b3:d4:cd:
         41:55:da:36:91:55:7b:f4:5e:f5:4c:e3:d6:7c:6d:de:fa:a3:
         de:01:d2:c0:69:b1:7c:23:b0:ae:d3:fc:06:09:e4:ac:c6:ea:
         72:d4:a1:bf:75:ea:d2:05:aa:df:c4:3a:82:23:53:e4:0e:fc:
         c8:dd:c4:2a:08:75:cf:2e:d3:d5:9d:3b:16:84:1b:f0:51:a1:
         b9:ad:f3:a9:d2:31:bc:8e:eb:8a:dc:75:e1:d9:04:95:9f:21:
         39:22:49:87:d5:f3:6a:7e:f9:81:5e:61:1f:22:88:25:6e:35:
         57:a2:c2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----