Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5923739f0d7ae9a00e78bf2f88f635b59afa3c9.cer
File: d5923739f0d7ae9a00e78bf2f88f635b59afa3c9.cer (raw, json)
Hash identifier: PXxgg8d0/54c2ntAjA4p3Vdk5W60R14x4TsmaTP0/gE=
Subject key identifier: C9:39:F0:6A:8E:DC:66:8C:6B:DA:75:FF:F2:30:BC:DE:8A:94:53:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: 93955E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/d5923739f0d7ae9a00e78bf2f88f635b59afa3c9.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 17 Nov 2017 18:36:46 +0000
Certificate not after: Tue 12 Apr 2022 15:00:00 +0000
Subordinate resources: AS: 6471
AS: 19228
AS: 27651
AS: 27986
AS: 28047
IP: 152.231.64.0/18
IP: 186.67.0.0/16
IP: 190.151.0.0/17
IP: 200.7.16.0/20
IP: 200.11.64.0 -- 200.11.103.255
IP: 200.72.0.0/16
IP: 200.106.152.0/21
IP: 200.111.0.0/16
IP: 2800:300::/32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9672030 (0x93955e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Nov 17 18:36:46 2017 GMT
Not After : Apr 12 15:00:00 2022 GMT
Subject: CN=d5923739f0d7ae9a00e78bf2f88f635b59afa3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:f2:94:7d:3a:fc:ff:63:00:a6:f6:60:c7:
c4:2c:3a:de:67:34:52:b6:0a:d3:aa:b1:3e:fa:45:
84:00:45:61:fd:42:f7:1a:e7:6d:04:5d:52:19:49:
53:46:cd:9f:b6:65:f0:9b:60:2b:0c:2f:42:86:e5:
79:12:61:ba:2f:d1:4e:54:26:75:18:eb:d4:b1:a6:
49:91:c1:b8:f5:ce:75:55:81:22:f9:28:08:be:05:
f2:41:1e:e8:76:bb:77:d3:7d:ce:36:96:2c:52:2b:
f7:97:aa:4c:66:c5:ef:1f:d1:79:45:78:ab:ad:d5:
7c:7d:15:43:4c:cf:b5:f7:00:89:3d:85:7e:37:a7:
9a:c3:ed:8b:07:94:8d:cd:c7:ac:72:00:91:13:1d:
a4:a8:6c:f4:ce:d5:7c:54:3f:4a:66:33:ea:01:37:
e5:3c:64:a2:29:fe:7b:83:d6:4e:0f:93:25:04:47:
8c:4d:26:f4:d6:dc:f4:81:d4:5a:d2:51:ab:15:d0:
43:07:37:78:ba:72:43:c4:f3:f1:c0:71:0c:02:a3:
62:bc:6f:a2:5f:01:45:61:85:cf:dd:1b:72:67:6f:
59:25:0f:ae:46:29:58:46:b5:75:5e:67:56:7d:d9:
c1:0c:04:65:83:11:33:9a:57:c2:be:1c:00:c0:46:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:39:F0:6A:8E:DC:66:8C:6B:DA:75:FF:F2:30:BC:DE:8A:94:53:72
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/d5923739f0d7ae9a00e78bf2f88f635b59afa3c9.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.64.0/18
186.67.0.0/16
190.151.0.0/17
200.7.16.0/20
200.11.64.0-200.11.103.255
200.72.0.0/16
200.106.152.0/21
200.111.0.0/16
IPv6:
2800:300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6471
19228
27651
27986
28047
Signature Algorithm: sha256WithRSAEncryption
09:ec:94:64:1f:b1:0b:2f:98:05:64:88:37:d9:1b:4b:d0:88:
5e:54:80:5c:62:83:bf:24:bb:da:63:0d:98:6e:ec:92:f0:79:
77:bc:0f:ef:8f:a3:a1:2f:69:db:c4:11:4f:33:ec:50:52:e6:
e0:f1:a2:5f:0c:81:7f:b0:10:53:74:9a:52:ef:9f:63:21:1c:
d2:6b:82:f8:4c:c8:cb:ef:eb:cd:ec:31:20:fa:11:3e:36:89:
61:e4:f7:0f:0a:74:f8:50:c7:42:9e:c6:f4:5e:51:30:1a:53:
6b:c4:c9:5f:e3:b0:1a:34:c6:50:dd:70:e8:20:9e:03:56:9c:
1a:25:29:24:65:10:e7:67:00:ba:3e:94:d7:29:5b:c1:41:fe:
b4:73:a6:57:37:cb:1d:4d:e7:ff:e8:6e:47:08:aa:b4:96:49:
eb:8d:57:6d:9c:73:11:eb:1b:dc:7c:1b:09:3b:7f:b5:4c:47:
ec:d7:53:93:cc:cf:c3:cd:45:97:fb:bd:07:04:7b:19:63:ba:
23:e3:4e:68:7c:48:ec:48:e3:de:98:68:c4:48:33:59:8e:d6:
a2:ca:ab:23:15:f3:e1:b9:36:9e:a4:6a:15:a2:49:dd:b2:0b:
27:b2:96:12:54:ff:ac:50:48:57:ed:45:ec:4e:05:cb:6d:30:
cf:47:33:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:17 2023 by rpki-client on console-fra.rpki-client.org