Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/aiIRiu8gIwzfw44OW_yffob6MTA.roa (download)

Subject key identifier:   6A:22:11:8A:EF:20:23:0C:DF:C3:8E:0E:5B:FC:9F:7E:86:FA:31:30 
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
asID:                     AS198651
Prefixes:
    1: 185.207.33.0/24 (max: 24)
    2: 185.207.34.0/24 (max: 24)
    3: 185.207.35.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/aiIRiu8gIwzfw44OW_yffob6MTA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203120959 (0xc1b613f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
        Validity
            Not Before: Apr 23 04:55:13 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=6a22118aef20230cdfc38e0e5bfc9f7e86fa3130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:a7:a8:20:84:c1:bd:e0:4c:ca:9e:37:1a:
                    63:fa:1a:88:1d:b8:7f:95:bc:01:e1:7a:7f:35:f2:
                    96:f5:3a:40:75:e1:ad:da:c4:6d:5b:6f:3f:c6:5f:
                    fc:ac:23:94:32:92:24:da:2c:35:84:47:4a:3a:f8:
                    25:aa:4e:b2:d6:8c:3c:21:cb:45:e2:cb:91:53:bd:
                    b9:cc:36:d2:c0:f7:87:5a:55:ab:5b:37:03:34:ed:
                    e0:a9:a2:14:f2:dd:15:98:c1:f9:50:4c:e9:64:2e:
                    21:d3:87:3f:c9:f9:27:ea:09:37:c1:e4:11:02:2b:
                    41:cc:e8:ca:57:c1:07:a8:52:97:04:1a:82:8f:7b:
                    c7:ea:a9:8c:2a:e8:a5:31:b8:f5:c6:1f:2a:bb:9f:
                    58:12:8f:1a:5f:5f:3d:66:19:df:5c:07:bc:82:d0:
                    c4:0b:85:e4:5d:6a:77:f1:30:01:c8:54:44:d8:9f:
                    73:56:bc:75:6d:31:77:3b:5e:9f:f9:10:55:e4:4b:
                    af:25:85:c4:fe:ab:76:dc:b7:35:04:0f:c5:93:76:
                    40:f6:4b:e1:a2:03:91:70:91:72:ac:45:63:0a:4b:
                    07:67:b1:94:16:37:ea:30:5f:03:61:d4:a2:67:83:
                    5f:9c:28:31:be:98:32:3f:18:f0:a3:d8:df:48:2c:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6A:22:11:8A:EF:20:23:0C:DF:C3:8E:0E:5B:FC:9F:7E:86:FA:31:30
            X509v3 Authority Key Identifier: 
                keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/aiIRiu8gIwzfw44OW_yffob6MTA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0.0......!..... 
    Signature Algorithm: sha256WithRSAEncryption
         67:81:14:e8:37:96:f4:61:2a:95:fc:a3:d0:ea:34:53:09:a9:
         64:40:23:fe:97:79:3d:e7:dc:c7:b9:48:e6:5e:0e:64:c3:78:
         a1:de:09:39:29:5e:54:f2:de:8e:9f:1f:8b:2d:53:23:b1:f9:
         82:a4:8e:b8:7a:2c:39:70:f6:b6:b1:6b:7f:e8:b5:0e:20:de:
         17:45:9e:30:4b:04:2f:e2:6f:b3:3e:c0:84:62:73:83:70:2b:
         cd:e4:5c:a6:7b:28:a0:1b:d9:15:d8:7f:43:46:ec:cf:f8:a6:
         cf:3f:cf:22:4c:27:2a:5c:c4:50:89:56:ac:c1:2d:54:21:1b:
         6e:87:10:be:7d:b3:3b:ef:1a:41:33:15:3e:d5:c4:a7:99:76:
         39:c8:97:d6:2b:f0:46:bd:6a:7e:a7:de:68:61:72:1e:4a:f4:
         de:22:b5:25:aa:da:09:c3:9c:45:ef:d3:4e:f2:04:71:e4:4b:
         4b:c7:46:c3:cf:32:81:0f:db:62:02:68:54:03:a8:a3:51:cd:
         8b:6d:d2:00:ff:93:fa:86:2e:60:85:07:99:1d:69:61:cc:b5:
         2f:69:9d:98:d4:29:c7:0b:ca:9c:2b:d5:89:5a:41:a7:61:3e:
         d8:df:6c:89:f3:3c:8a:b7:69:e5:22:80:48:57:e2:ce:7e:e6:
         95:0f:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Aug 1 19:16:17 2021 by LibreSSL & rpki-client.