Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52684977E72D3E645375657C7AB1D92CF5711CE2.cer
File:                     52684977E72D3E645375657C7AB1D92CF5711CE2.cer (raw, json)
Hash identifier:          WlQp69nn+YpsVlpKZZDFdr9l8EuI0wMIeqYZC7xyWxk=
Subject key identifier:   52:68:49:77:E7:2D:3E:64:53:75:65:7C:7A:B1:D9:2C:F5:71:1C:E2
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       1DB78C8DC03038FB23E597835BB9C6B73941532A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/52684977E72D3E645375657C7AB1D92CF5711CE2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 27 May 2024 17:30:01 +0000
Certificate not after:    Mon 26 May 2025 17:35:01 +0000
Subordinate resources:    AS: 11888
                          AS: 28518
                          AS: 265594
                          IP: 138.97.168.0/22
                          IP: 168.90.68.0/22
                          IP: 170.238.220.0/22
                          IP: 187.160.0.0/15
                          IP: 187.164.0.0/15
                          IP: 187.179.128.0/19
                          IP: 189.218.0.0/15
                          IP: 200.188.128.0/19
                          IP: 200.225.0.0/19
                          IP: 200.239.0.0/18
                          IP: 201.158.64.0/19
                          IP: 201.162.0.0/18
                          IP: 201.166.192.0/18
                          IP: 201.172.0.0/15
                          IP: 201.175.64.0/18
                          IP: 207.248.32.0/19
                          IP: 2806:230::/32

Validation:               Failed, certificate revoked on Wed 29 May 2024 03:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b7:8c:8d:c0:30:38:fb:23:e5:97:83:5b:b9:c6:b7:39:41:53:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: May 27 17:30:01 2024 GMT
            Not After : May 26 17:35:01 2025 GMT
        Subject: CN=52684977E72D3E645375657C7AB1D92CF5711CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:c2:f7:ba:ec:b5:ca:f9:28:d7:85:67:46:
                    cf:c7:ce:dc:fa:5f:7c:87:f3:91:30:6d:7d:a2:b4:
                    61:7c:98:80:2d:6b:28:cd:fb:ff:f9:3a:5c:ec:91:
                    a0:a7:f9:78:69:e9:75:8e:a7:3c:b0:67:18:49:84:
                    72:1c:b3:6d:73:b6:ff:c7:98:4c:0c:6e:6e:ff:a5:
                    7e:9f:68:6a:09:63:de:9f:43:37:be:45:91:66:cc:
                    59:1b:a0:84:73:45:5a:85:d0:86:a0:03:13:b7:00:
                    41:67:0e:59:88:4f:79:f5:f7:16:94:50:82:ce:2a:
                    6b:ba:23:3c:56:9a:dd:f6:2d:23:db:e4:6a:47:96:
                    8a:38:3a:51:c4:da:06:9d:42:2a:67:7a:e8:f1:eb:
                    ca:78:76:11:fe:5f:8c:a2:35:be:41:63:1f:c3:36:
                    70:76:7d:d5:4d:be:4c:be:6a:3f:5f:bf:27:2a:90:
                    ad:b9:b0:32:f5:6c:e2:7c:3d:05:65:20:00:92:db:
                    b9:65:8b:ad:68:90:60:12:21:46:60:6b:e2:a1:d1:
                    6b:be:9d:25:ae:4c:46:27:6d:97:e3:17:c6:b0:51:
                    0b:04:f8:1b:5c:f2:9b:40:5c:9e:7c:b4:72:51:7c:
                    1e:e2:40:2f:76:b7:d7:01:08:59:08:53:f1:ba:3b:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:68:49:77:E7:2D:3E:64:53:75:65:7C:7A:B1:D9:2C:F5:71:1C:E2
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B6F0F9DBE33FDC0D10F2623436C98BD3DD339E174F3934048DC08CDE6EA646/0/52684977E72D3E645375657C7AB1D92CF5711CE2.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.168.0/22
                  168.90.68.0/22
                  170.238.220.0/22
                  187.160.0.0/15
                  187.164.0.0/15
                  187.179.128.0/19
                  189.218.0.0/15
                  200.188.128.0/19
                  200.225.0.0/19
                  200.239.0.0/18
                  201.158.64.0/19
                  201.162.0.0/18
                  201.166.192.0/18
                  201.172.0.0/15
                  201.175.64.0/18
                  207.248.32.0/19
                IPv6:
                  2806:230::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11888
                  28518
                  265594

    Signature Algorithm: sha256WithRSAEncryption
         1d:27:5d:2f:29:89:82:2f:4c:d7:75:b3:42:02:4a:67:bc:70:
         ad:71:57:9f:6e:db:a1:8f:3b:1d:06:ce:00:ad:68:de:d6:4f:
         8d:7b:df:e7:c0:c9:31:33:7d:60:db:36:5f:77:73:59:7d:70:
         c8:b9:59:27:ff:01:6f:1f:b0:2f:37:73:21:05:27:db:b3:6a:
         ed:c7:f1:69:ab:71:e9:9c:7b:30:1f:cb:6a:49:b4:91:e0:55:
         54:bd:eb:36:20:d2:90:ae:13:9b:90:9c:28:b4:ea:3c:92:10:
         f1:0c:1a:f6:73:60:51:59:00:f5:5f:a4:05:70:af:c9:f8:cd:
         a6:84:e4:c1:d5:55:c6:20:11:47:b5:00:8f:47:18:b4:2f:73:
         1d:ba:73:39:4e:f7:71:d7:f4:f5:61:52:87:e2:13:7b:c8:f4:
         c1:5e:d1:16:1a:4f:0f:8e:a4:3c:8e:87:87:31:36:6b:f3:2d:
         56:09:e4:6c:59:91:c0:10:44:cf:27:91:e8:a8:91:6c:6f:e6:
         67:20:62:b1:33:e7:fd:96:70:1b:74:c1:ec:51:2c:fe:88:ff:
         de:6e:b1:02:e6:6e:34:25:93:cc:fa:11:58:a1:7c:a5:11:a2:
         fd:05:df:00:de:f4:51:53:d6:d8:7d:77:2e:84:72:ed:e3:ad:
         be:0d:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org