Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer
File: cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer (raw, json)
Hash identifier: 2qUdaKNgr5isAdZFJPqS66Jy8uLDtPgEZizwanufc+I=
Subject key identifier: D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: E00C7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 17 Nov 2017 18:36:39 +0000
Certificate not after: Sat 30 Mar 2024 15:00:00 +0000
Subordinate resources: AS: 11664
AS: 14535
IP: 138.36.52.0/22
IP: 177.234.128.0/22
IP: 186.182.0.0/16
IP: 190.3.0.0/17
IP: 190.220.0.0/15
IP: 200.49.64.0/19
IP: 200.59.128.0 -- 200.59.175.255
IP: 200.61.32.0/19
IP: 200.69.128.0/19
IP: 200.80.128.0/17
IP: 200.123.64.0/18
IP: 2800:190::/32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14683262 (0xe00c7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Nov 17 18:36:39 2017 GMT
Not After : Mar 30 15:00:00 2024 GMT
Subject: CN=cc3aa122dfd9e78c282ee13cf25302c07b4c605f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:4a:e9:91:57:f8:70:06:d1:fe:32:0c:52:
1c:53:fb:43:c7:04:6e:ea:78:1b:cf:0b:75:78:91:
00:cb:9c:67:09:13:57:c4:dd:d5:ee:34:6a:b2:f4:
c4:e0:3c:c0:08:c2:4d:69:d8:4f:fa:9c:93:8a:b7:
88:a0:39:44:8f:88:f0:a1:0d:60:5a:0a:08:89:39:
b6:38:55:71:28:9c:c2:06:89:15:e2:07:e9:d5:48:
e6:73:53:7a:59:60:9e:49:00:43:56:73:8a:b0:74:
45:ea:bd:b2:e9:41:82:dc:5e:db:29:b1:65:95:af:
79:f6:be:e5:91:ff:a6:e3:3a:54:72:7e:87:fe:ee:
71:ed:be:7b:c3:53:4e:bf:a1:c8:de:0f:ac:92:83:
b5:dd:67:76:02:db:58:9d:2e:23:52:e0:e7:d4:0a:
fd:22:fe:5b:41:07:87:0a:d1:ae:24:48:7b:80:f4:
0b:4e:b5:0a:c5:ec:e4:f2:29:a7:70:69:d5:db:7c:
09:b9:98:42:cc:54:51:dd:3d:c6:11:5d:22:06:15:
64:2b:a9:85:45:6e:da:87:bd:9b:d6:36:fc:f7:31:
75:3a:38:01:49:2f:ce:50:c8:ef:55:8b:e1:77:db:
13:4e:64:39:cd:9e:2f:5c:67:a0:b9:37:74:40:1e:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.52.0/22
177.234.128.0/22
186.182.0.0/16
190.3.0.0/17
190.220.0.0/15
200.49.64.0/19
200.59.128.0-200.59.175.255
200.61.32.0/19
200.69.128.0/19
200.80.128.0/17
200.123.64.0/18
IPv6:
2800:190::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11664
14535
Signature Algorithm: sha256WithRSAEncryption
3f:ce:7d:07:c8:fa:a9:f9:49:09:0c:50:cd:d6:16:c1:f1:7d:
6c:43:49:c2:b9:59:08:04:aa:e6:9e:e5:af:8d:b3:93:50:62:
be:64:a4:e9:3a:37:35:56:bc:6e:36:34:ac:c4:6a:f7:9d:34:
d9:31:12:f4:1d:a8:f1:2a:43:d1:8e:6f:b6:28:ee:be:4a:11:
0c:79:c0:0b:83:94:9a:6e:9f:a7:d9:96:80:b0:64:0e:29:82:
88:dd:dd:f6:7e:d8:24:81:9b:a4:19:91:06:97:02:ea:84:8e:
9b:88:f7:c4:6f:5a:25:81:65:c1:56:48:3c:29:8a:f8:41:49:
d3:f8:9f:e4:82:2e:fb:be:bd:5e:5c:33:aa:1c:06:91:f8:fa:
2b:24:0d:60:df:1c:f4:38:b9:8a:0c:09:9f:1b:ca:af:71:2b:
e0:f8:35:10:ff:ea:28:ae:9c:ce:b4:95:e1:3c:1d:b8:3d:da:
9a:d8:fb:d7:6c:ff:29:1f:b4:80:af:af:e4:e4:2c:df:79:2a:
fa:8b:cf:43:18:fc:4f:69:cb:39:cd:fa:89:1d:bc:63:31:7f:
d1:66:50:6b:16:05:3a:6c:8a:bb:b3:94:0e:87:2c:16:fa:64:
be:c7:fa:84:b4:ae:10:2c:2c:72:cf:91:7f:d1:95:48:bb:16:
a3:72:ae:85
-----BEGIN CERTIFICATE-----
MIIGHzCCBQegAwIBAgIEAOAMfjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYzOVoXDTI0MDMzMDE1MDAw
MFowMzExMC8GA1UEAxMoY2MzYWExMjJkZmQ5ZTc4YzI4MmVlMTNjZjI1MzAyYzA3
YjRjNjA1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALyYSumRV/hw
BtH+MgxSHFP7Q8cEbup4G88LdXiRAMucZwkTV8Td1e40arL0xOA8wAjCTWnYT/qc
k4q3iKA5RI+I8KENYFoKCIk5tjhVcSicwgaJFeIH6dVI5nNTellgnkkAQ1ZzirB0
Req9sulBgtxe2ymxZZWvefa+5ZH/puM6VHJ+h/7uce2+e8NTTr+hyN4PrJKDtd1n
dgLbWJ0uI1Lg59QK/SL+W0EHhwrRriRIe4D0C061CsXs5PIpp3Bp1dt8CbmYQsxU
Ud09xhFdIgYVZCuphUVu2oe9m9Y2/PcxdTo4AUkvzlDI71WL4XfbE05kOc2eL1xn
oLk3dEAeVo0CAwEAAaOCA04wggNKMB0GA1UdDgQWBBTUNX2L4QrUoyIea4X6MjWi
aF3HKTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81NTczZjdhZS05OTA0
LTRlNmYtYTQyMC03NTNkOWNjY2YxMWMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTU3M2Y3YWUtOTkwNC00
ZTZmLWE0MjAtNzUzZDljY2NmMTFjL2NjM2FhMTIyZGZkOWU3OGMyODJlZTEzY2Yy
NTMwMmMwN2I0YzYwNWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBw
BggrBgEFBQcBBwEB/wRhMF8wTgQCAAEwSAMEAookNAMEArHqgAMDALq2AwQHvgMA
AwMBvtwDBAXIMUAwDAMEB8g7gAMEBMg7oAMEBcg9IAMEBchFgAMEB8hQgAMEBsh7
QDANBAIAAjAHAwUAKAABkDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgItkAICOMcw
DQYJKoZIhvcNAQELBQADggEBAD/OfQfI+qn5SQkMUM3WFsHxfWxDScK5WQgEquae
5a+Ns5NQYr5kpOk6NzVWvG42NKzEavedNNkxEvQdqPEqQ9GOb7Yo7r5KEQx5wAuD
lJpun6fZloCwZA4pgojd3fZ+2CSBm6QZkQaXAuqEjpuI98RvWiWBZcFWSDwpivhB
SdP4n+SCLvu+vV5cM6ocBpH4+iskDWDfHPQ4uYoMCZ8byq9xK+D4NRD/6iiunM60
leE8Hbg92prY+9ds/ykftICvr+TkLN95KvqLz0MY/E9pyznN+okdvGMxf9FmUGsW
BTpsiruzlA6HLBb6ZL7H+oS0rhAsLHLPkX/RlUi7FqNyroU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:17 2023 by rpki-client on console-fra.rpki-client.org