Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer
File: e023bb317eecb014b8f7048b5b30535732897c94.cer (raw, json)
Hash identifier: HlUYjuJkl4qL7D70q6ilRPqjqJhQwsdq5X3w81sUQrg=
Subject key identifier: B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: 01033E98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e023bb317eecb014b8f7048b5b30535732897c94.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 04 Apr 2023 18:41:00 +0000
Certificate not after: Fri 01 Aug 2025 06:00:00 +0000
Subordinate resources: AS: 6503
AS: 14000
IP: 148.240.0.0/16
IP: 148.243.0.0/16
IP: 148.245.0.0/16
IP: 187.162.0.0 -- 187.167.255.255
IP: 187.176.0.0 -- 187.179.127.255
IP: 189.205.0.0/16
IP: 189.207.0.0 -- 189.213.255.255
IP: 200.23.72.0/23
IP: 200.23.147.0/24
IP: 200.33.192.0/21
IP: 200.33.208.0 -- 200.33.231.255
IP: 200.34.64.0/19
IP: 200.34.141.0/24
IP: 200.36.96.0/19
IP: 200.38.64.0/19
IP: 200.38.224.0/19
IP: 200.39.224.0/19
IP: 200.52.0.0/20
IP: 200.52.32.0/19
IP: 200.56.0.0 -- 200.56.95.255
IP: 200.57.96.0/19
IP: 200.57.192.0/18
IP: 200.76.192.0/19
IP: 200.78.128.0/17
IP: 200.94.192.0/19
IP: 200.188.0.0/17
IP: 200.194.0.0/18
IP: 200.236.64.0/18
IP: 201.140.0.0/18
IP: 201.156.0.0/16
IP: 201.158.128.0/17
IP: 207.249.128.0/18
IP: 2806::/28
Validation: Failed, certificate revoked on Tue 27 Feb 2024 00:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16989848 (0x1033e98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Apr 4 18:41:00 2023 GMT
Not After : Aug 1 06:00:00 2025 GMT
Subject: CN=e023bb317eecb014b8f7048b5b30535732897c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e7:58:ed:4f:05:45:ac:74:32:f6:7f:12:9e:
cb:b3:52:43:e4:92:41:bd:72:e7:d1:99:b4:3d:cc:
f2:d1:9c:a1:4f:1f:bf:5f:d0:f8:81:86:71:ad:37:
3a:02:99:a8:6c:9e:75:ba:4b:6e:2d:73:d9:83:a8:
9f:60:4d:d0:5c:aa:01:8b:38:fe:df:8c:fc:40:c8:
94:b9:f4:61:ff:33:21:2a:d1:7f:c7:f7:ab:b5:1b:
c5:e1:2b:a3:82:bc:47:06:d2:b5:89:29:17:95:a7:
97:4a:b8:df:b3:a2:03:81:0b:5b:48:24:21:8c:20:
5d:5e:9e:80:ff:c6:d4:ff:c2:9c:4c:1c:f6:65:81:
74:a5:ce:3f:db:16:a5:af:56:0a:89:5b:19:6c:4a:
cc:9e:b3:41:37:da:ea:05:e8:50:8c:8a:94:18:22:
17:55:08:0d:54:0a:bb:4e:72:8c:4f:ba:91:3e:e9:
06:4a:0c:a5:27:45:1d:57:86:e7:b2:d3:ba:70:dd:
86:0b:7f:bd:07:c2:d4:56:88:4b:a2:e9:85:85:2c:
20:1b:78:0e:a7:a5:b2:bf:73:cf:54:9f:ed:64:3d:
67:d1:a5:e6:56:7c:98:33:05:b4:52:5e:cb:f7:4f:
99:9c:ae:82:9f:46:e6:2c:8d:3b:a0:f7:84:62:1d:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e023bb317eecb014b8f7048b5b30535732897c94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.240.0.0/16
148.243.0.0/16
148.245.0.0/16
187.162.0.0-187.167.255.255
187.176.0.0-187.179.127.255
189.205.0.0/16
189.207.0.0-189.213.255.255
200.23.72.0/23
200.23.147.0/24
200.33.192.0/21
200.33.208.0-200.33.231.255
200.34.64.0/19
200.34.141.0/24
200.36.96.0/19
200.38.64.0/19
200.38.224.0/19
200.39.224.0/19
200.52.0.0/20
200.52.32.0/19
200.56.0.0-200.56.95.255
200.57.96.0/19
200.57.192.0/18
200.76.192.0/19
200.78.128.0/17
200.94.192.0/19
200.188.0.0/17
200.194.0.0/18
200.236.64.0/18
201.140.0.0/18
201.156.0.0/16
201.158.128.0/17
207.249.128.0/18
IPv6:
2806::/28
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6503
14000
Signature Algorithm: sha256WithRSAEncryption
be:ff:b8:4c:26:26:01:33:39:bd:a1:58:7b:e0:62:12:20:e0:
fb:ae:e0:86:33:8e:63:01:15:0d:52:c7:b9:67:49:9e:b5:8b:
a9:c7:6e:58:94:da:39:96:cd:f4:2b:a3:4b:fc:a6:d7:4e:27:
89:bb:d2:6f:a3:10:a1:b3:d5:9f:31:9b:a5:a5:49:92:16:d8:
a5:df:e8:2f:7d:a6:11:5f:02:47:90:74:5d:0c:c4:62:4d:fc:
7c:47:30:ef:91:d4:b4:5d:0a:1b:45:fb:59:61:6b:29:88:4f:
69:5a:0f:0f:bb:7b:06:7c:0f:c0:76:69:8e:9e:86:92:46:e6:
fe:a0:92:84:ae:24:03:10:fa:b0:df:02:2d:ac:fc:63:68:59:
4f:55:59:d7:94:d2:34:57:1b:fa:8f:dc:54:fd:82:f9:25:df:
e4:66:5b:8b:60:f4:f1:95:3c:40:38:7f:d0:c8:9e:71:5d:d3:
bc:dc:4b:39:f7:f8:a9:11:b1:5f:6c:6a:cf:b4:37:61:37:cb:
44:5b:ab:fe:a1:4d:2f:61:0b:61:16:c6:05:43:08:5c:ff:e0:
1a:b8:d7:cd:40:97:1b:30:bc:64:4f:de:98:cc:1f:c3:92:98:
f4:91:a0:5e:f8:50:0e:f4:87:52:95:b0:99:2f:dc:e6:6b:c5:
b5:f0:74:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Feb 27 04:44:17 2024 by rpki-client on console-ams.rpki-client.org