Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
File:                     d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer (raw, json)
Hash identifier:          sa5KfWw5mCbSWdN/bno2Ck1fJeZ0jmoQzhRoHN6K/ug=
Subject key identifier:   C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6812E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:38 +0000
Certificate not after:    Wed 25 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 7303
                          AS: 7934
                          AS: 10318
                          AS: 10481
                          AS: 10895
                          AS: 10983
                          AS: 11356
                          AS: 12264
                          AS: 21590
                          AS: 26608
                          AS: 27871
                          IP: 24.232.0.0/16
                          IP: 66.60.0.0/18
                          IP: 152.168.0.0/14
                          IP: 170.150.196.0/22
                          IP: 170.231.136.0/22
                          IP: 181.0.0.0/12
                          IP: 181.28.0.0/14
                          IP: 181.80.0.0 -- 181.111.255.255
                          IP: 181.164.0.0 -- 181.171.255.255
                          IP: 181.228.0.0/14
                          IP: 186.108.0.0/14
                          IP: 186.124.0.0/14
                          IP: 186.136.0.0/14
                          IP: 186.152.0.0/15
                          IP: 190.16.0.0/14
                          IP: 190.30.0.0/15
                          IP: 190.136.0.0/14
                          IP: 190.188.0.0 -- 190.195.255.255
                          IP: 190.224.0.0/13
                          IP: 190.244.0.0/14
                          IP: 191.97.128.0/17
                          IP: 196.32.64.0/19
                          IP: 200.3.32.0 -- 200.3.95.255
                          IP: 200.32.0.0/19
                          IP: 200.42.0.0 -- 200.42.159.255
                          IP: 200.43.0.0/16
                          IP: 200.45.0.0/16
                          IP: 200.49.96.0/20
                          IP: 200.49.128.0/19
                          IP: 200.55.64.0/18
                          IP: 200.61.192.0/19
                          IP: 200.63.0.0/19
                          IP: 200.71.224.0/20
                          IP: 200.73.128.0/18
                          IP: 200.80.64.0/20
                          IP: 200.82.0.0/17
                          IP: 200.89.128.0/18
                          IP: 200.105.0.0 -- 200.105.95.255
                          IP: 200.110.224.0/21
                          IP: 200.114.128.0/17
                          IP: 200.117.0.0/16
                          IP: 200.122.0.0/17
                          IP: 200.126.128.0 -- 200.127.255.255
                          IP: 201.212.0.0/15
                          IP: 201.231.0.0/16
                          IP: 201.235.0.0/16
                          IP: 201.252.0.0/15
                          IP: 2001:13d0::/29
                          IP: 2800:2000::/20
                          IP: 2800:b000::/32
                          IP: 2803:da80::/32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16154926 (0xf6812e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:38 2017 GMT
            Not After : Sep 25 05:00:00 2024 GMT
        Subject: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:81:95:4c:b7:34:b0:14:44:09:70:3e:e9:
                    26:b5:4b:28:06:19:60:9e:df:0a:a4:6a:f3:95:f7:
                    8f:48:bb:c0:b3:9d:a7:3d:27:f8:3c:31:18:84:5a:
                    bc:28:53:e6:75:9b:e4:26:17:1d:52:e1:0f:be:13:
                    91:ea:ca:01:ce:95:7a:b7:55:e3:2a:3f:55:e9:39:
                    eb:6e:84:01:f3:5c:e0:fe:34:cf:30:2d:11:4e:9d:
                    8c:c2:44:6e:2f:71:23:6c:b1:c1:29:1f:3a:65:55:
                    87:a4:01:81:ef:e0:1d:f9:eb:3d:eb:3d:87:2a:82:
                    14:03:1f:21:70:e2:d4:1e:1f:72:94:87:a5:12:b5:
                    56:b2:16:af:0b:fe:93:7f:2e:38:ca:b1:a2:04:a2:
                    72:6b:94:55:8f:dc:06:03:48:e0:63:99:0d:f8:29:
                    6c:7f:c4:55:d9:63:f8:cc:04:73:7d:24:03:1a:d4:
                    bb:2e:e2:24:3f:4d:f2:78:d9:70:9d:83:29:22:b5:
                    20:f6:97:8a:88:41:ee:da:42:12:32:a4:9d:8b:37:
                    08:e3:9f:f6:b3:e1:a8:3a:89:52:83:b4:85:f6:40:
                    53:ce:2c:b4:1f:3e:0c:cd:fd:3a:6a:be:c8:c7:d2:
                    58:9b:02:dd:28:fb:2d:87:0a:76:4f:84:97:75:7c:
                    fb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.232.0.0/16
                  66.60.0.0/18
                  152.168.0.0/14
                  170.150.196.0/22
                  170.231.136.0/22
                  181.0.0.0/12
                  181.28.0.0/14
                  181.80.0.0-181.111.255.255
                  181.164.0.0-181.171.255.255
                  181.228.0.0/14
                  186.108.0.0/14
                  186.124.0.0/14
                  186.136.0.0/14
                  186.152.0.0/15
                  190.16.0.0/14
                  190.30.0.0/15
                  190.136.0.0/14
                  190.188.0.0-190.195.255.255
                  190.224.0.0/13
                  190.244.0.0/14
                  191.97.128.0/17
                  196.32.64.0/19
                  200.3.32.0-200.3.95.255
                  200.32.0.0/19
                  200.42.0.0-200.42.159.255
                  200.43.0.0/16
                  200.45.0.0/16
                  200.49.96.0/20
                  200.49.128.0/19
                  200.55.64.0/18
                  200.61.192.0/19
                  200.63.0.0/19
                  200.71.224.0/20
                  200.73.128.0/18
                  200.80.64.0/20
                  200.82.0.0/17
                  200.89.128.0/18
                  200.105.0.0-200.105.95.255
                  200.110.224.0/21
                  200.114.128.0/17
                  200.117.0.0/16
                  200.122.0.0/17
                  200.126.128.0-200.127.255.255
                  201.212.0.0/15
                  201.231.0.0/16
                  201.235.0.0/16
                  201.252.0.0/15
                IPv6:
                  2001:13d0::/29
                  2800:2000::/20
                  2800:b000::/32
                  2803:da80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7303
                  7934
                  10318
                  10481
                  10895
                  10983
                  11356
                  12264
                  21590
                  26608
                  27871

    Signature Algorithm: sha256WithRSAEncryption
         09:a0:9f:1a:33:5c:36:3f:f2:d3:7a:7d:3a:aa:79:81:b8:49:
         5e:98:b3:9c:a9:8d:26:a0:63:a0:52:36:ed:f3:df:6d:82:bc:
         e9:5f:10:1f:86:b9:fe:0e:fa:7b:78:4c:01:3a:54:d7:9a:b2:
         54:0c:c3:e0:55:de:9d:2e:06:3a:d5:ba:ad:99:ba:cc:73:24:
         b7:11:bc:1c:24:74:8a:f2:f8:a5:da:86:97:4d:ee:85:ae:9e:
         6f:0f:81:97:e4:2f:02:16:b8:9c:ac:98:63:f3:4c:65:07:57:
         85:51:4e:8e:50:b3:fd:b8:b2:7a:72:a4:0f:2b:25:74:54:28:
         ba:09:e2:22:2b:ec:9b:d7:9d:a1:2f:96:e3:87:cc:84:f6:c1:
         c2:31:b5:ac:aa:7e:86:be:15:ed:5c:01:40:c5:ab:e4:15:4c:
         b2:0d:90:cd:11:f5:e9:41:fc:36:16:0f:b5:19:f1:46:87:a3:
         9e:6b:05:be:ab:5d:45:81:d2:b0:a8:e3:95:43:9d:54:1c:7b:
         e0:d0:14:e4:b2:05:4e:35:43:78:56:36:a7:0a:35:9b:9d:8f:
         8a:3b:ff:75:8e:77:2c:47:b4:c5:da:e1:f1:16:48:da:99:55:
         2c:63:7a:70:b9:3f:a4:66:c1:a0:65:b0:25:f5:63:51:8d:14:
         c0:44:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----