Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/jXJgZFJgds_btHcX4JUAMFNHoqs.roa (download)

Subject key identifier:   8D:72:60:64:52:60:76:CF:DB:B4:77:17:E0:95:00:30:53:47:A2:AB 
Authority key identifier: E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F
asID:                     AS394337
Prefixes:
    1: 185.188.28.0/22 maxlen: 24

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/jXJgZFJgds_btHcX4JUAMFNHoqs.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9438429 (0x9004dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e379d83d22a0beeb86c87e15a6cb6c69bd42903f
        Validity
            Not Before: Jan  1 01:55:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8d726064526076cfdbb47717e09500305347a2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:4b:14:e1:d0:04:41:60:26:39:29:97:5d:
                    15:ba:d3:a3:cc:37:9b:75:fe:57:b8:dc:61:1c:8e:
                    7b:c2:16:d2:7d:a2:36:ab:74:81:b5:69:51:1e:bf:
                    fb:e4:8b:44:ca:43:fb:6a:75:6e:78:1d:8c:4a:22:
                    59:c3:ca:9c:6d:90:a9:70:69:7b:57:f8:cd:5b:5f:
                    e9:ba:2e:81:e6:b8:a4:90:e7:62:48:9c:41:13:5d:
                    42:fc:25:0d:39:2a:a7:0c:c0:6e:9e:e0:88:34:82:
                    e6:70:0d:4d:af:ca:35:18:ba:70:26:ce:a3:07:2a:
                    19:90:d3:ac:ab:eb:16:5d:5c:4a:cb:d6:5d:8d:f9:
                    53:05:05:7d:e8:1a:7c:27:05:2a:bb:5e:3f:51:15:
                    76:39:39:05:7b:a6:bc:92:a5:c9:89:d2:81:74:24:
                    8a:05:7a:0d:dd:cd:74:54:28:52:27:e9:6a:e9:40:
                    65:87:44:0e:fd:40:81:ef:6b:96:90:3a:5a:77:cf:
                    2b:66:7f:2d:d2:34:1e:e7:2f:34:37:8e:00:71:15:
                    72:e1:b9:1a:47:74:59:1d:4c:25:f3:f8:66:2b:29:
                    7b:e6:3e:5d:ec:d6:38:db:b9:62:2c:fb:b4:06:b0:
                    3d:a7:90:e4:28:46:80:b4:92:2e:2c:1b:57:7c:75:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                8D:72:60:64:52:60:76:CF:DB:B4:77:17:E0:95:00:30:53:47:A2:AB
            X509v3 Authority Key Identifier: 
                keyid:E3:79:D8:3D:22:A0:BE:EB:86:C8:7E:15:A6:CB:6C:69:BD:42:90:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43nYPSKgvuuGyH4Vpstsab1CkD8.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/jXJgZFJgds_btHcX4JUAMFNHoqs.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df5209-2c9f-42e9-b0df-3812814c93aa/1/43nYPSKgvuuGyH4Vpstsab1CkD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:ed:32:a5:8a:4e:8c:22:6c:e2:e3:b2:ac:f7:35:34:ae:28:
         e7:77:98:91:59:85:b1:03:1d:43:10:73:41:0e:a9:f7:58:2e:
         65:45:bb:6d:08:e1:75:93:a3:b7:02:e6:cd:87:a6:a5:37:61:
         b8:1c:d3:bb:27:2d:fb:78:5e:9a:1e:e1:04:ad:28:5c:09:87:
         e4:47:dc:f4:ab:d4:df:53:32:c4:68:51:48:4f:7d:e8:3f:09:
         b9:61:d0:26:08:63:3a:f4:e4:84:29:2a:a3:62:26:87:d2:ae:
         9c:2c:82:c5:92:01:17:f2:70:f3:32:99:f3:7e:1b:6b:bb:0a:
         03:12:c0:11:8c:c6:08:8f:05:e1:4d:77:40:ba:59:ba:bd:fc:
         47:49:69:40:d3:e8:57:1f:a7:f8:98:50:2b:62:a2:da:54:96:
         58:a9:1b:5d:14:9c:fd:eb:b3:cc:16:6f:6c:20:0d:ed:f7:c4:
         70:39:3b:ca:04:5c:8d:0b:b0:ba:a4:3a:05:49:dd:27:bd:89:
         7e:e3:6e:c9:cf:35:ee:43:d8:1d:df:2b:d4:61:ff:a5:6f:07:
         bd:4c:2a:0a:4b:ec:86:fb:34:e4:1c:1d:19:0d:0f:e4:42:be:
         77:f0:69:d5:63:4a:7a:75:eb:81:64:35:12:af:f5:39:86:33:
         50:aa:91:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 04:46:11 2022 by LibreSSL & rpki-client.