Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ANB_EhBg5ky_p3nHBSzC_zPTU2o.roa
File: ANB_EhBg5ky_p3nHBSzC_zPTU2o.roa (raw, json)
Hash identifier: nuMN/EKUpkBPYY55PipwONp/DSw/2Gll/W1P3Z1NEQg=
Subject key identifier: 00:D0:7F:12:10:60:E6:4C:BF:A7:79:C7:05:2C:C2:FF:33:D3:53:6A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018506A4FC58446CD0F64D3EF2F90F234354
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ANB_EhBg5ky_p3nHBSzC_zPTU2o.roa
Signing time: Mon 12 Dec 2022 14:02:33 +0000
ROA not before: Mon 12 Dec 2022 14:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.126.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.17.0/24 maxlen: 24
5.105.19.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:a4:fc:58:44:6c:d0:f6:4d:3e:f2:f9:0f:23:43:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Dec 12 14:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00d07f121060e64cbfa779c7052cc2ff33d3536a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:55:ce:70:e2:06:85:fc:ed:2d:fd:f2:87:
22:35:7f:31:2a:40:41:3f:64:31:27:1c:d8:d6:55:
7a:4e:62:d2:07:c7:50:a9:05:e2:01:cf:2b:f5:b7:
0c:cb:b4:36:62:9a:a4:1f:6a:1b:1e:8c:d8:75:a1:
bd:22:42:a7:82:df:cb:6d:c9:e6:a5:dd:8d:c1:f3:
37:b2:0c:2f:50:f5:aa:b9:37:49:55:5d:61:e7:5d:
31:00:04:85:68:95:44:a6:55:2a:b5:ec:b0:4b:5d:
a1:ab:44:51:40:d9:74:ba:03:0b:48:9a:82:6d:41:
02:3d:e9:6d:60:4f:35:8f:00:bf:6a:b1:51:d1:26:
f5:a9:0a:ca:d3:8a:43:f2:a5:fe:63:35:76:2b:8a:
ed:0d:b2:9f:9a:69:87:ec:76:24:52:30:0e:f2:09:
06:1d:ee:57:b9:c1:60:57:cc:8f:83:aa:91:64:5e:
d8:af:83:e6:29:1e:38:8b:25:7f:44:ee:fa:06:db:
95:90:9a:0d:48:96:2a:14:09:93:06:cc:e8:a4:a7:
db:1d:c8:cf:0a:8f:ed:80:ae:b7:64:7f:a6:28:e7:
4a:df:fd:8c:8e:62:6f:77:04:7a:3f:9c:09:9f:04:
2a:20:92:e1:81:eb:30:3e:72:c8:a3:66:b0:ae:36:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D0:7F:12:10:60:E6:4C:BF:A7:79:C7:05:2C:C2:FF:33:D3:53:6A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ANB_EhBg5ky_p3nHBSzC_zPTU2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.1.0/24
5.105.12.0/24
5.105.17.0/24
5.105.19.0/24
5.105.26.0/24
5.105.43.0/24
5.105.49.0/24
5.105.63.0/24
5.105.68.0/23
5.105.72.0/24
5.105.76.0/23
5.105.80.0-5.105.82.255
5.105.84.0/24
5.105.94.0/23
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0-5.105.127.255
5.105.131.0-5.105.132.255
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.141.0-5.105.143.255
5.105.156.0/24
5.105.162.0/24
5.105.164.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.242.0/24
5.105.244.0/23
5.105.248.0/23
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a2:b1:07:3f:6c:aa:33:18:bf:7a:2e:d8:06:bc:f8:7c:43:
8f:7d:b8:05:76:bb:c7:d2:43:a3:85:8f:b4:6b:a1:56:9f:ea:
25:6d:a6:e2:f8:7d:83:ec:a3:93:7b:23:78:45:b5:21:9f:03:
8f:5c:0d:f9:37:9d:63:62:d5:0e:e0:ef:ca:69:d8:8c:6c:eb:
7c:81:8c:89:5e:a9:fe:f8:11:af:68:64:8d:2a:21:a9:92:21:
27:95:58:96:25:b9:f7:c8:52:91:e9:ee:c1:ca:bd:a5:cb:59:
23:b9:b8:82:f1:4e:de:eb:04:7a:84:20:d3:e2:cb:f7:29:ca:
50:fe:22:8b:bc:94:29:73:4f:32:65:a6:05:6c:aa:29:93:f0:
6e:65:e6:4e:0c:65:6b:ce:ef:b0:c1:74:30:29:dc:dd:a7:17:
2e:9f:f8:ff:09:c4:c5:15:31:89:ca:20:73:5c:cb:91:d2:3f:
46:d3:26:b7:d7:98:29:67:91:5e:4c:48:65:b6:a3:50:33:e4:
90:fd:99:b0:33:e2:bf:37:e0:5c:30:ab:6c:7c:60:40:24:d9:
29:39:57:32:4f:24:8e:73:4d:66:4f:78:b4:67:f5:f3:04:1e:
de:3a:82:9f:3a:1c:14:41:23:37:d2:e6:db:34:9a:2a:ed:d9:
58:26:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org