Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/6d/c16cff-27c9-4879-9588-0e0d15548679/1/hXM3IpbEMwmO3gHKWt40svhnrmg.roa (download)

Subject key identifier:   85:73:37:22:96:C4:33:09:8E:DE:01:CA:5A:DE:34:B2:F8:67:AE:68 
Authority key identifier: DA:A3:E5:B7:FE:06:1F:75:1B:70:7D:00:2F:76:B1:EE:70:3F:40:35
asID:                     AS3356
Prefixes:
    1: 45.154.82.0/24 (max: 24)
    2: 45.154.83.0/24 (max: 24)
    3: 45.154.80.0/24 (max: 24)
    4: 45.154.81.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/6d/c16cff-27c9-4879-9588-0e0d15548679/1/hXM3IpbEMwmO3gHKWt40svhnrmg.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86888590 (0x52dd08e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa3e5b7fe061f751b707d002f76b1ee703f4035
        Validity
            Not Before: Apr 29 05:16:25 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=8573372296c433098ede01ca5ade34b2f867ae68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:28:b3:76:e6:f1:27:e6:43:b4:9c:d5:4d:d2:
                    51:db:26:b6:ab:2f:0e:00:db:c7:1c:4b:00:1d:71:
                    08:85:05:44:31:1c:08:76:f8:77:31:95:24:5d:3f:
                    b7:ac:b8:dd:8d:39:03:a7:6f:52:83:99:5f:bf:5e:
                    db:f7:29:67:41:a3:e0:07:f7:8b:0a:cb:d2:b5:1f:
                    be:47:ee:7e:39:c0:e7:b9:ba:79:37:7a:1c:81:56:
                    b3:3e:24:4f:d1:9e:fd:66:94:16:08:14:a1:a5:56:
                    a5:52:c4:7e:51:47:7c:cd:f4:fa:6f:b3:ea:a0:98:
                    6b:57:c1:43:43:4e:a0:91:e2:af:27:93:c4:02:db:
                    d3:19:31:ce:fc:29:80:3e:ae:de:eb:b4:3b:9a:7a:
                    1c:f2:bc:f0:f5:4e:f3:bc:2f:b1:de:99:bd:d0:32:
                    d6:07:bb:a4:ef:99:12:3e:7b:86:52:44:89:4b:ae:
                    f6:9d:4a:1b:ff:67:9d:f7:45:3e:00:d3:94:57:61:
                    83:0e:31:b0:1f:d7:1c:ab:ec:64:3c:31:b5:76:8a:
                    fe:b0:b4:3e:f8:14:cd:05:72:a3:01:a4:cf:3f:fe:
                    58:6b:ff:b9:23:c1:13:de:99:d2:20:69:05:00:5a:
                    75:65:6f:0e:8c:9e:3b:4a:4b:9c:1f:a5:39:c1:ed:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                85:73:37:22:96:C4:33:09:8E:DE:01:CA:5A:DE:34:B2:F8:67:AE:68
            X509v3 Authority Key Identifier: 
                keyid:DA:A3:E5:B7:FE:06:1F:75:1B:70:7D:00:2F:76:B1:EE:70:3F:40:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qPlt_4GH3UbcH0AL3ax7nA_QDU.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c16cff-27c9-4879-9588-0e0d15548679/1/hXM3IpbEMwmO3gHKWt40svhnrmg.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c16cff-27c9-4879-9588-0e0d15548679/1/2qPlt_4GH3UbcH0AL3ax7nA_QDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-.P
    Signature Algorithm: sha256WithRSAEncryption
         14:d6:69:c3:14:63:06:91:e2:c6:d8:50:42:77:f2:71:a6:65:
         cc:8b:2c:90:f9:9c:cc:95:79:17:39:77:e9:c3:97:4e:d8:fa:
         fc:36:68:36:74:cd:8b:d3:48:cb:40:ea:40:9e:e8:8b:42:04:
         52:38:f3:16:f9:3a:8d:75:a1:bc:d8:78:70:d2:a2:20:6c:ad:
         11:66:e8:06:db:3e:75:39:f8:28:b5:00:e5:f6:1e:13:82:37:
         08:5b:21:e3:61:11:a0:cc:f5:ff:bb:24:4a:49:26:a4:7d:07:
         bd:c4:64:69:41:38:c8:e0:18:cb:1a:05:c1:bd:92:3c:b7:87:
         5c:7a:ec:e2:54:ce:f6:ab:0b:88:63:7f:36:ed:32:ee:3c:ec:
         65:f3:22:ce:6a:88:1c:7c:08:8c:68:63:0a:5e:3c:9f:74:df:
         09:43:95:c9:81:af:a1:05:5f:fc:6c:ac:8c:c8:04:8b:48:7e:
         0f:b4:73:8e:e9:35:e3:96:08:e0:90:25:a3:70:05:42:2f:74:
         35:96:68:71:16:45:72:b6:ea:2e:fa:0a:90:11:a3:17:2d:d4:
         36:44:a7:0c:39:75:cd:1c:8a:3d:69:14:31:56:b3:ea:aa:79:
         57:27:79:cd:29:42:02:33:52:24:ce:42:0e:62:8b:e2:3e:f8:
         54:4b:3d:07
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBS3QjjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YWEzZTViN2ZlMDYxZjc1MWI3MDdkMDAyZjc2YjFlZTcwM2Y0MDM1MB4XDTIxMDQy
OTA1MTYyNVoXDTIyMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODU3MzM3MjI5NmM0
MzMwOThlZGUwMWNhNWFkZTM0YjJmODY3YWU2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI0os3bm8SfmQ7Sc1U3SUdsmtqsvDgDbxxxLAB1xCIUFRDEc
CHb4dzGVJF0/t6y43Y05A6dvUoOZX79e2/cpZ0Gj4Af3iwrL0rUfvkfufjnA57m6
eTd6HIFWsz4kT9Ge/WaUFggUoaVWpVLEflFHfM30+m+z6qCYa1fBQ0NOoJHiryeT
xALb0xkxzvwpgD6u3uu0O5p6HPK88PVO87wvsd6ZvdAy1ge7pO+ZEj57hlJEiUuu
9p1KG/9nnfdFPgDTlFdhgw4xsB/XHKvsZDwxtXaK/rC0PvgUzQVyowGkzz/+WGv/
uSPBE96Z0iBpBQBadWVvDoyeO0pLnB+lOcHtf3UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSFczcilsQzCY7eAcpa3jSy+GeuaDAfBgNVHSMEGDAWgBTao+W3/gYfdRtw
fQAvdrHucD9ANTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJxUGx0XzRHSDNVYmNIMEFMM2F4N25BX1FEVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmQvYzE2Y2ZmLTI3YzktNDg3OS05NTg4LTBlMGQxNTU0ODY3OS8x
L2hYTTNJcGJFTXdtTzNnSEtXdDQwc3ZobnJtZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQv
YzE2Y2ZmLTI3YzktNDg3OS05NTg4LTBlMGQxNTU0ODY3OS8xLzJxUGx0XzRHSDNV
YmNIMEFMM2F4N25BX1FEVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2aUDANBgkqhkiG9w0BAQsFAAOC
AQEAFNZpwxRjBpHixthQQnfycaZlzIsskPmczJV5Fzl36cOXTtj6/DZoNnTNi9NI
y0DqQJ7oi0IEUjjzFvk6jXWhvNh4cNKiIGytEWboBts+dTn4KLUA5fYeE4I3CFsh
42ERoMz1/7skSkkmpH0HvcRkaUE4yOAYyxoFwb2SPLeHXHrs4lTO9qsLiGN/Nu0y
7jzsZfMizmqIHHwIjGhjCl48n3TfCUOVyYGvoQVf/GysjMgEi0h+D7Rzjuk145YI
4JAlo3AFQi90NZZocRZFcrbqLvoKkBGjFy3UNkSnDDl1zRyKPWkUMVaz6qp5Vyd5
zSlCAjNSJM5CDmKL4j74VEs9Bw==
-----END CERTIFICATE-----

Generated at Sun Jun 13 12:31:28 2021 by LibreSSL & rpki-client.