Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
File:                     e5d85378526621fbd4956efa10478f912f0807db.cer (raw, json)
Hash identifier:          t/2PbNDI6ls484+8VkjEevP+2OL1cCCBBZ6SiwC+sV8=
Subject key identifier:   18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7D474
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 11 Apr 2018 14:54:58 +0000
Certificate not after:    Sat 03 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 27789
                          IP: 190.93.0.0/19
                          IP: 190.93.64.0/18
                          IP: 200.12.240.0/21
                          IP: 201.221.64.0/19
                          IP: 2800:70::/32

Validation:               Failed, certificate revoked on Wed 14 Feb 2024 13:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16241780 (0xf7d474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 14:54:58 2018 GMT
            Not After : Aug  3 15:00:00 2024 GMT
        Subject: CN=e5d85378526621fbd4956efa10478f912f0807db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:c5:50:e2:0a:e2:5e:5b:ab:cd:d4:a4:b3:
                    b1:26:13:10:af:1c:5b:f7:bc:7e:03:01:bc:1f:be:
                    df:21:e5:d8:f5:a4:90:c8:77:09:15:34:ef:fc:8f:
                    b6:8b:cf:4b:0b:58:fa:33:30:b6:03:b2:74:da:3c:
                    e0:49:df:a9:e3:a9:27:1a:15:0c:72:01:de:c6:df:
                    8b:aa:46:af:66:8d:b8:1b:be:cc:08:5c:bc:ba:a5:
                    53:7c:63:cb:4a:ec:88:5c:57:81:27:b4:c9:e7:a7:
                    90:3d:b9:86:3c:ba:84:98:3e:b0:c0:60:3e:96:f0:
                    f5:d4:95:ea:a5:80:53:dd:47:b0:3c:2d:68:97:6f:
                    df:22:95:86:4b:f2:ce:e2:f8:ce:e8:ae:06:33:64:
                    4c:80:6c:cf:78:ab:98:01:f9:fe:97:75:8a:25:b6:
                    2e:ff:1c:a8:3b:f0:3a:de:62:fa:10:5c:11:a7:53:
                    bf:c6:3a:20:be:01:af:90:c0:d7:12:12:09:79:13:
                    bd:ac:62:5a:6c:2a:52:ba:4d:d6:89:4e:c5:d4:35:
                    36:3c:d8:73:8f:01:94:5b:b1:97:7a:e5:ba:1e:e6:
                    26:d0:ee:4a:d1:97:5c:09:cd:89:00:bc:00:1d:41:
                    09:11:2e:b2:35:25:73:7f:2c:a0:76:c2:e3:72:73:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.0.0/19
                  190.93.64.0/18
                  200.12.240.0/21
                  201.221.64.0/19
                IPv6:
                  2800:70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27789

    Signature Algorithm: sha256WithRSAEncryption
         6b:0b:a9:a9:07:9b:ec:0b:4a:c2:d8:41:a8:66:26:17:b0:bb:
         a7:d9:d4:bf:7a:7f:65:21:8a:f8:be:c8:ca:e8:6f:f2:6c:12:
         ce:04:af:65:77:2f:06:13:ef:5a:e9:dd:b5:dc:91:b4:b8:c4:
         99:a1:3a:dd:c8:99:a8:6b:e4:32:65:08:86:4d:2d:7e:f4:1e:
         87:da:19:2c:85:7c:49:e7:d4:84:aa:e9:53:26:65:10:d9:0d:
         ca:96:6f:d9:7d:85:43:72:96:a9:02:4e:8b:f1:81:ad:b4:34:
         78:13:97:45:3f:32:ac:a9:85:26:81:bb:5c:79:cf:f7:51:4e:
         dc:1c:d9:88:dc:b1:fe:6c:91:c4:fe:87:c6:b4:45:e2:d7:f9:
         29:cd:3d:df:13:7e:6d:66:fe:9e:8d:ec:ea:2a:6a:15:a8:71:
         8f:e4:88:5b:7a:c7:e2:aa:86:34:73:66:c1:e0:a5:a1:bf:8c:
         c5:ac:96:fd:af:29:c9:60:16:e5:6f:81:7e:8b:d4:fc:8c:d5:
         73:d8:20:39:80:f6:84:59:66:97:4a:04:c3:3a:32:3d:c4:46:
         f9:00:bc:99:38:38:41:f3:80:16:5e:98:96:57:a9:f6:98:b7:
         b6:62:c1:02:3a:68:ad:f2:24:45:6f:b1:94:5b:bf:22:ab:88:
         02:12:7e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:19:14 2024 by rpki-client on console-fra.rpki-client.org