Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
File:                     c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer (raw, json)
Hash identifier:          R9K2l5xvpR8XoyyfWxIkrgNFlnSGadxvhREaj4sqhTg=
Subject key identifier:   A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5FF90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:51 +0000
Certificate not after:    Sun 19 May 2024 06:00:00 +0000
Subordinate resources:    AS: 10620
                          AS: 14080
                          AS: 26603
                          AS: 27864
                          IP: 181.48.0.0/12
                          IP: 186.80.0.0/13
                          IP: 186.144.0.0/14
                          IP: 190.8.192.0/18
                          IP: 190.84.0.0/15
                          IP: 190.143.0.0/17
                          IP: 190.144.0.0/14
                          IP: 190.156.0.0/14
                          IP: 200.26.128.0/19
                          IP: 200.71.32.0/19
                          IP: 200.74.128.0/19
                          IP: 200.89.224.0/19
                          IP: 200.118.0.0/16
                          IP: 201.216.0.0/18
                          IP: 201.221.160.0/19
                          IP: 2800:480::/29

Validation:               Failed, certificate revoked on Sun 17 Mar 2024 18:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15073168 (0xe5ff90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:51 2017 GMT
            Not After : May 19 06:00:00 2024 GMT
        Subject: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:be:62:7b:06:76:ee:f8:3b:f9:2b:6a:11:
                    1f:02:1c:ed:3e:b2:9d:50:f9:f3:7c:dd:f5:2f:d2:
                    b0:13:72:e9:08:e8:f2:5e:39:21:06:a1:0f:44:49:
                    c3:04:84:0b:f7:92:dd:07:2f:cf:5c:8a:a0:e7:ff:
                    ef:b7:93:3c:dd:17:3d:f4:de:93:45:43:10:52:62:
                    22:ed:07:08:ba:78:5f:ea:b8:9c:be:5a:62:dc:30:
                    13:ff:2a:65:1b:46:d4:db:3f:ec:ea:60:57:87:fb:
                    40:e7:42:e6:ff:ff:48:0d:22:be:67:5c:63:66:ec:
                    c9:0a:3a:36:04:f6:6e:cf:6b:95:c6:17:8b:1c:9b:
                    e8:a6:cd:58:68:96:06:2d:de:92:65:e1:f7:f4:43:
                    16:a9:16:72:2b:1b:8d:5e:d2:66:7a:f1:7f:0b:c1:
                    35:1a:f7:62:86:34:94:c5:54:0a:8d:68:44:08:8d:
                    4c:9e:50:0d:ec:93:b1:33:29:93:3a:0c:28:4b:ea:
                    70:18:c6:07:ae:19:0d:04:5f:17:67:e0:3f:0c:f6:
                    b4:c7:8b:bd:6c:a0:f9:7c:ec:d8:84:f4:65:d7:ba:
                    0b:f8:b4:ed:e3:58:f3:3e:a4:12:f6:2a:3e:5a:11:
                    3b:bb:28:a2:54:b8:c5:33:36:cf:9d:2a:f6:0e:7a:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.48.0.0/12
                  186.80.0.0/13
                  186.144.0.0/14
                  190.8.192.0/18
                  190.84.0.0/15
                  190.143.0.0/17
                  190.144.0.0/14
                  190.156.0.0/14
                  200.26.128.0/19
                  200.71.32.0/19
                  200.74.128.0/19
                  200.89.224.0/19
                  200.118.0.0/16
                  201.216.0.0/18
                  201.221.160.0/19
                IPv6:
                  2800:480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10620
                  14080
                  26603
                  27864

    Signature Algorithm: sha256WithRSAEncryption
         72:01:9b:32:60:24:f4:66:26:17:aa:aa:df:ba:a1:fa:d9:b0:
         f4:38:91:f8:41:ac:3a:96:c0:09:ac:15:88:df:0a:af:b5:79:
         49:2d:d0:93:d1:f3:7e:1f:35:24:9a:1d:90:67:b4:9e:8c:a5:
         af:93:ac:09:2d:82:4a:91:ed:af:42:87:22:7c:29:7f:4a:fc:
         7f:11:96:28:f2:ba:b4:41:50:15:7e:05:69:d0:b6:ff:54:74:
         7a:c2:1d:7b:8a:9a:46:33:db:dd:e0:be:74:34:4f:68:32:17:
         39:3f:f1:49:d6:a5:1f:fa:a0:73:a5:a8:50:9b:9b:0f:ad:ff:
         c0:5e:b5:85:de:87:53:25:63:7f:20:49:d1:06:19:df:bf:30:
         77:bf:99:6a:35:0d:8c:5b:62:b4:3f:91:80:09:17:ff:ef:8d:
         52:80:1e:70:aa:4b:a0:09:02:58:74:a5:50:3b:47:4a:eb:fd:
         1a:94:17:02:34:56:d3:ef:51:bf:5c:8f:c9:64:8b:84:15:47:
         89:70:23:eb:e8:c3:a7:89:a0:0c:13:00:89:c7:55:2d:64:77:
         a3:67:eb:22:c7:b3:90:3d:b0:5c:4b:58:af:1d:03:23:e7:5e:
         15:87:15:27:11:c5:46:43:87:37:91:7a:34:50:90:7d:8a:b4:
         56:eb:9f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:24:31 2024 by rpki-client on console-ams.rpki-client.org