Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/NPolT-79ioC__2dSBNext4ujPOg.roa
File: NPolT-79ioC__2dSBNext4ujPOg.roa (raw, json)
Hash identifier: NOru60GjfXxXjLcq0dLN4L0AgUBvnATWfoKRXGg7i/w=
Subject key identifier: 34:FA:25:4F:EE:FD:8A:80:BF:FF:67:52:04:D7:B1:B7:8B:A3:3C:E8
Certificate issuer: /CN=9706aa905465586424f387fdbd83648b72d946de
Certificate serial: 01856F799B710016165E4A7AB4A290B4126C
Authority key identifier: 97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/NPolT-79ioC__2dSBNext4ujPOg.roa
Signing time: Sun 01 Jan 2023 22:35:18 +0000
ROA not before: Sun 01 Jan 2023 22:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201964
IP address blocks: 31.187.84.0/22 maxlen: 22
185.55.84.0/22 maxlen: 22
2a02:4820::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 06 Jun 2023 10:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:9b:71:00:16:16:5e:4a:7a:b4:a2:90:b4:12:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9706aa905465586424f387fdbd83648b72d946de
Validity
Not Before: Jan 1 22:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34fa254feefd8a80bfff675204d7b1b78ba33ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:be:9f:13:6e:88:a5:83:7d:d9:48:e3:73:
bb:63:76:a0:12:1d:47:f5:1e:25:e5:74:81:17:f4:
86:bf:13:93:ec:be:8d:01:cb:0b:c3:62:af:c6:f6:
01:d6:cf:c9:0f:c4:c9:42:95:3a:fc:69:56:d7:3a:
5a:9b:c0:20:56:9c:ee:19:2e:01:ef:6f:fb:95:a1:
a0:9f:f1:c6:db:bc:da:3e:4e:27:0d:7d:79:e9:0a:
51:f4:39:da:dd:e0:df:08:96:5d:65:aa:73:ba:21:
c0:d0:c1:f6:fd:7f:1b:e9:b0:d8:b3:77:49:e7:c3:
4f:45:f0:60:eb:83:d8:a7:00:2d:73:59:18:26:23:
bc:dd:9f:b8:c6:31:b3:ec:fc:f7:2c:b4:df:12:24:
77:28:ae:bd:26:93:75:8d:e2:b2:db:c6:ba:8f:17:
5c:cd:06:7e:33:20:cf:fd:7a:18:29:7d:c6:98:1e:
4d:76:1f:0b:2c:2b:e9:5e:48:38:cc:b5:71:2e:8c:
2d:30:ae:ad:2f:8f:12:72:c6:25:67:41:50:27:16:
3a:7e:30:58:c9:9b:ce:0b:17:92:3c:da:3b:f1:72:
cd:f2:b9:5d:fb:ea:25:1e:2b:a8:7b:df:6e:19:2a:
5f:87:1e:1f:2d:e0:d0:7b:b3:ad:58:7b:bb:de:a2:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FA:25:4F:EE:FD:8A:80:BF:FF:67:52:04:D7:B1:B7:8B:A3:3C:E8
X509v3 Authority Key Identifier:
keyid:97:06:AA:90:54:65:58:64:24:F3:87:FD:BD:83:64:8B:72:D9:46:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwaqkFRlWGQk84f9vYNki3LZRt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/NPolT-79ioC__2dSBNext4ujPOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1cf3f0-a036-4c76-8b09-5c535b746353/1/lwaqkFRlWGQk84f9vYNki3LZRt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.84.0/22
185.55.84.0/22
IPv6:
2a02:4820::/32
Signature Algorithm: sha256WithRSAEncryption
09:c3:9b:3e:68:56:b8:81:21:c3:37:12:0a:bc:cd:47:f8:ba:
8a:63:64:70:57:2c:a6:e0:54:0e:fe:fd:26:88:9e:fb:2a:6a:
30:d1:b0:4d:1c:7d:28:81:55:42:90:84:97:a3:ef:71:67:75:
93:7d:96:94:8a:a4:e2:c7:51:7e:8e:db:b5:3c:3c:05:ae:a7:
c3:3a:8b:74:99:5d:c5:ae:81:a8:91:86:6e:70:63:cf:a5:54:
b3:c3:19:16:ed:da:97:f5:c7:b8:f7:6d:cd:be:95:2d:09:bf:
42:1c:5b:96:4e:04:a5:b9:9e:08:c9:a4:2a:bb:10:77:c1:77:
19:4e:83:a0:56:37:fb:d5:03:ec:3b:09:df:08:c0:93:b2:0b:
85:43:f4:d4:c4:8c:7d:1f:ff:f4:c8:a5:0f:f4:d5:60:2c:e4:
a2:4f:13:0f:01:f8:c4:e9:1b:a9:6a:f4:43:70:6d:c0:b6:14:
ea:e1:2b:20:22:59:29:7f:cd:ac:37:33:f6:e8:85:28:7d:53:
3a:31:bc:0c:b7:f6:e2:7a:d3:72:68:e6:1a:8b:9d:cf:ee:dd:
7c:c2:71:7b:95:fa:91:d9:54:fb:db:7e:45:c2:d9:44:e0:d2:
b3:36:09:81:fc:3b:1a:e5:ec:09:c6:70:0e:54:b0:0b:a4:22:
2f:53:15:66
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVveZtxABYWXkp6tKKQtBJsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MDZhYTkwNTQ2NTU4NjQyNGYzODdmZGJkODM2NDhiNzJk
OTQ2ZGUwHhcNMjMwMTAxMjIzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGZhMjU0ZmVlZmQ4YTgwYmZmZjY3NTIwNGQ3YjFiNzhiYTMzY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoa+nxNuiKWDfdlI43O7Y3agEh1H
9R4l5XSBF/SGvxOT7L6NAcsLw2KvxvYB1s/JD8TJQpU6/GlW1zpam8AgVpzuGS4B
72/7laGgn/HG27zaPk4nDX156QpR9Dna3eDfCJZdZapzuiHA0MH2/X8b6bDYs3dJ
58NPRfBg64PYpwAtc1kYJiO83Z+4xjGz7Pz3LLTfEiR3KK69JpN1jeKy28a6jxdc
zQZ+MyDP/XoYKX3GmB5Ndh8LLCvpXkg4zLVxLowtMK6tL48ScsYlZ0FQJxY6fjBY
yZvOCxeSPNo78XLN8rld++olHiuoe99uGSpfhx4fLeDQe7OtWHu73qKnjwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDT6JU/u/YqAv/9nUgTXsbeLozzoMB8GA1UdIwQY
MBaAFJcGqpBUZVhkJPOH/b2DZIty2UbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDkt
NWM1MzViNzQ2MzUzLzEvTlBvbFQtNzlpb0NfXzJkU0JOZXh0NHVqUE9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xY2YzZjAtYTAzNi00Yzc2LThiMDktNWM1MzViNzQ2MzUz
LzEvbHdhcWtGUmxXR1FrODRmOXZZTmtpM0xaUnQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCH7tUAwQC
uTdUMA0EAgACMAcDBQAqAkggMA0GCSqGSIb3DQEBCwUAA4IBAQAJw5s+aFa4gSHD
NxIKvM1H+LqKY2RwVyym4FQO/v0miJ77Kmow0bBNHH0ogVVCkISXo+9xZ3WTfZaU
iqTix1F+jtu1PDwFrqfDOot0mV3FroGokYZucGPPpVSzwxkW7dqX9ce4923NvpUt
Cb9CHFuWTgSluZ4IyaQquxB3wXcZToOgVjf71QPsOwnfCMCTsguFQ/TUxIx9H//0
yKUP9NVgLOSiTxMPAfjE6RupavRDcG3AthTq4SsgIlkpf82sNzP26IUofVM6MbwM
t/bietNyaOYai53P7t18wnF7lfqR2VT7235FwtlE4NKzNgmB/Dsa5ewJxnAOVLAL
pCIvUxVm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:43 2024 by rpki-client on console-ams.rpki-client.org