Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/95/8e68d7-7af7-442d-9d53-de11e9057eb5/1/ZcDC-EuDILIwu0KbX2gJeODjW6s.roa (download)

Subject key identifier:   65:C0:C2:F8:4B:83:20:B2:30:BB:42:9B:5F:68:09:78:E0:E3:5B:AB 
Authority key identifier: 87:12:67:E6:CA:21:13:64:75:67:F3:C1:5C:76:0C:01:43:A9:7D:3C
asID:                     AS3356
Prefixes:
    1: 45.85.204.0/22 (max: 22)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/95/8e68d7-7af7-442d-9d53-de11e9057eb5/1/ZcDC-EuDILIwu0KbX2gJeODjW6s.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7021758 (0x6b24be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871267e6ca2113647567f3c15c760c0143a97d3c
        Validity
            Not Before: Mar 30 19:32:16 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=65c0c2f84b8320b230bb429b5f680978e0e35bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:5f:b5:d6:f3:b1:35:f8:3a:6b:b9:fd:aa:
                    9c:84:d0:e6:9d:15:4d:02:19:f2:47:6d:bb:d3:90:
                    49:a3:a1:e9:a3:c1:cb:48:fb:fd:f3:33:ac:9c:cb:
                    2e:df:8d:81:e8:a2:0c:02:4f:4f:1a:7c:62:24:72:
                    a6:5e:ac:4d:11:28:c0:d2:9f:63:ce:22:69:32:7d:
                    11:84:ff:84:28:89:30:19:8d:68:6c:27:74:ab:01:
                    5d:fd:33:b8:be:f3:58:28:fc:ae:f8:ee:75:d5:de:
                    cb:b5:ad:d5:75:a9:ac:0b:35:d0:9c:4a:b0:50:78:
                    bc:64:94:c2:42:2c:9a:2c:e1:b1:04:36:4a:71:a2:
                    46:78:02:18:97:c3:13:77:a8:3d:c5:ce:ed:49:dd:
                    b9:59:1f:4b:88:26:9b:50:16:8b:78:07:00:6a:4b:
                    39:74:0f:61:84:b9:a7:20:ad:a1:53:f5:e4:f1:1e:
                    89:ce:7a:6e:64:4c:71:7a:61:f7:54:fd:51:fb:fe:
                    c0:bc:0f:9a:a9:4d:80:be:31:fd:8d:14:6a:b4:e2:
                    2f:51:cf:9d:11:75:f3:9d:d4:9d:cb:72:60:13:e5:
                    2a:e0:c4:6c:f5:bf:d2:fe:a0:80:02:85:8e:45:74:
                    d4:3f:c7:16:84:1a:61:c9:fa:1a:a6:3b:1d:2e:24:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                65:C0:C2:F8:4B:83:20:B2:30:BB:42:9B:5F:68:09:78:E0:E3:5B:AB
            X509v3 Authority Key Identifier: 
                keyid:87:12:67:E6:CA:21:13:64:75:67:F3:C1:5C:76:0C:01:43:A9:7D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxJn5sohE2R1Z_PBXHYMAUOpfTw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8e68d7-7af7-442d-9d53-de11e9057eb5/1/ZcDC-EuDILIwu0KbX2gJeODjW6s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8e68d7-7af7-442d-9d53-de11e9057eb5/1/hxJn5sohE2R1Z_PBXHYMAUOpfTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0.0.....0....-U.
    Signature Algorithm: sha256WithRSAEncryption
         79:58:38:b4:c7:c4:b0:89:2e:e8:b5:d4:d7:69:39:2c:0f:39:
         37:7c:75:65:f6:59:45:bd:27:2a:68:f4:9f:4c:78:a1:41:7e:
         c3:ac:23:79:1a:b0:74:9a:72:66:4c:ba:de:ab:41:04:df:13:
         1b:bd:4d:7e:17:74:14:de:4b:00:f2:75:b8:a9:e4:0c:50:a2:
         51:6f:2c:ea:0b:e7:fa:57:ed:65:c6:6b:86:99:87:da:20:90:
         82:67:c5:3e:32:43:76:70:8e:b6:b9:9a:a4:4a:bb:6b:f1:2d:
         d0:a0:82:01:24:98:d0:e4:23:ed:15:2f:4d:4f:8f:97:64:15:
         1e:f9:15:79:94:62:99:03:fa:a4:9e:e2:19:f6:75:7b:c7:26:
         83:b6:b8:17:0e:29:3f:05:58:d5:4c:26:8e:98:56:63:ad:4e:
         93:fe:0f:77:cb:2e:e0:d5:c2:5a:6a:0a:32:db:19:43:1a:77:
         c8:89:f9:8b:8b:a7:e6:39:eb:78:e7:03:01:97:6d:37:86:5a:
         1c:91:14:f0:61:b0:e7:63:d4:0d:e4:06:76:67:ca:00:32:60:
         46:10:66:f8:e3:89:ef:90:a6:40:6a:6a:14:dd:62:44:28:db:
         a7:49:e4:3b:f9:2b:91:54:c9:1f:73:30:b4:de:75:1d:39:24:
         7e:bf:3c:c5
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDayS+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg3
MTI2N2U2Y2EyMTEzNjQ3NTY3ZjNjMTVjNzYwYzAxNDNhOTdkM2MwHhcNMjEwMzMw
MTkzMjE2WhcNMjIwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2NWMwYzJmODRiODMy
MGIyMzBiYjQyOWI1ZjY4MDk3OGUwZTM1YmFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApTVftdbzsTX4Omu5/aqchNDmnRVNAhnyR22705BJo6Hpo8HL
SPv98zOsnMsu342B6KIMAk9PGnxiJHKmXqxNESjA0p9jziJpMn0RhP+EKIkwGY1o
bCd0qwFd/TO4vvNYKPyu+O511d7Lta3VdamsCzXQnEqwUHi8ZJTCQiyaLOGxBDZK
caJGeAIYl8MTd6g9xc7tSd25WR9LiCabUBaLeAcAaks5dA9hhLmnIK2hU/Xk8R6J
znpuZExxemH3VP1R+/7AvA+aqU2AvjH9jRRqtOIvUc+dEXXzndSdy3JgE+Uq4MRs
9b/S/qCAAoWORXTUP8cWhBphyfoapjsdLiRWWQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFGXAwvhLgyCyMLtCm19oCXjg41urMB8GA1UdIwQYMBaAFIcSZ+bKIRNkdWfz
wVx2DAFDqX08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
aHhKbjVzb2hFMlIxWl9QQlhIWU1BVU9wZlR3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85NS84ZTY4ZDctN2FmNy00NDJkLTlkNTMtZGUxMWU5MDU3ZWI1LzEv
WmNEQy1FdURJTEl3dTBLYlgyZ0plT0RqVzZzLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS84
ZTY4ZDctN2FmNy00NDJkLTlkNTMtZGUxMWU5MDU3ZWI1LzEvaHhKbjVzb2hFMlIx
Wl9QQlhIWU1BVU9wZlR3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVXMMA0GCSqGSIb3DQEBCwUAA4IB
AQB5WDi0x8SwiS7otdTXaTksDzk3fHVl9llFvScqaPSfTHihQX7DrCN5GrB0mnJm
TLreq0EE3xMbvU1+F3QU3ksA8nW4qeQMUKJRbyzqC+f6V+1lxmuGmYfaIJCCZ8U+
MkN2cI62uZqkSrtr8S3QoIIBJJjQ5CPtFS9NT4+XZBUe+RV5lGKZA/qknuIZ9nV7
xyaDtrgXDik/BVjVTCaOmFZjrU6T/g93yy7g1cJaagoy2xlDGnfIifmLi6fmOet4
5wMBl203hlockRTwYbDnY9QN5AZ2Z8oAMmBGEGb444nvkKZAamoU3WJEKNunSeQ7
+SuRVMkfczC03nUdOSR+vzzF
-----END CERTIFICATE-----

Generated at Sat Jun 12 11:35:59 2021 by LibreSSL & rpki-client.