Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/XuDo-3sq0S3gJ4cohym1r4_xT0A.roa (download)

Subject key identifier:   5E:E0:E8:FB:7B:2A:D1:2D:E0:27:87:28:87:29:B5:AF:8F:F1:4F:40 
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
asID:                     AS328543
Prefixes:
    1: 45.149.148.0/22 maxlen: 32

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/XuDo-3sq0S3gJ4cohym1r4_xT0A.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44711594 (0x2aa3eaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
        Validity
            Not Before: Jan  1 13:01:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ee0e8fb7b2ad12de02787288729b5af8ff14f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:47:23:c4:66:0d:e7:bd:7f:33:80:9a:16:
                    ec:3c:e5:5f:a8:53:5b:7e:8c:51:49:76:33:f1:34:
                    96:62:52:88:cf:94:4f:ad:2d:09:5d:d9:a3:a2:19:
                    1b:c9:d9:39:2a:1e:23:65:eb:f5:cd:7b:3b:2c:28:
                    62:8c:ba:13:69:ae:0b:0b:92:09:14:49:a6:94:7c:
                    05:05:63:f2:33:bb:a6:c9:49:5c:60:0e:d4:b9:38:
                    33:5d:c7:a0:75:03:9a:15:d2:1d:fa:ca:26:75:48:
                    2c:4e:62:b3:3f:cf:38:40:0f:85:31:20:bd:e5:d6:
                    91:24:60:96:25:ea:61:01:77:a5:c0:9f:4c:20:b6:
                    ac:9e:f0:76:05:f4:52:d4:56:5b:b4:d7:a5:b7:2b:
                    af:dc:ee:35:9d:10:7b:dd:9c:30:4f:e0:41:37:3b:
                    60:cf:c2:31:e8:39:ba:7a:ec:e6:f5:4b:ed:b0:7b:
                    32:74:e3:64:6f:11:28:0d:40:bc:d7:17:7b:52:16:
                    8a:c6:79:77:e1:6a:5d:99:7f:6e:f9:ab:e4:4d:cd:
                    40:01:e4:3e:00:7d:d0:0a:94:a1:00:65:37:c6:3c:
                    dd:8a:7e:72:0a:11:d4:dc:5e:8e:b7:38:5b:ab:7d:
                    69:f4:a7:b5:7a:ae:d8:61:77:e3:ff:61:f3:27:45:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5E:E0:E8:FB:7B:2A:D1:2D:E0:27:87:28:87:29:B5:AF:8F:F1:4F:40
            X509v3 Authority Key Identifier: 
                keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/XuDo-3sq0S3gJ4cohym1r4_xT0A.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:99:02:f1:c3:17:99:2e:2a:8d:00:4b:9e:75:8c:b7:4e:
         50:a6:3b:89:f6:35:36:11:ff:ee:89:71:98:46:42:4b:a1:7e:
         08:13:28:d9:18:72:6d:4e:bb:49:26:2b:f3:b0:4e:c6:ff:05:
         f3:df:22:93:f7:bd:cd:24:f9:1f:75:63:6e:0f:dc:48:21:82:
         f5:74:db:63:7a:53:b2:d0:03:bd:7e:dc:94:83:d9:eb:77:d9:
         95:62:3c:71:04:d5:12:7d:52:35:38:86:6b:18:3f:ca:b6:e6:
         bc:4c:25:2c:1d:35:ab:97:24:fa:e1:9b:d8:21:da:a1:2e:4b:
         c4:49:c9:e2:37:27:42:c4:52:40:da:bd:8f:8f:99:0c:0c:f1:
         36:4f:83:49:43:2e:66:5e:13:df:bf:81:ff:70:8e:32:a0:32:
         bc:92:19:98:4b:c4:ce:a0:b1:03:ac:a2:8e:6e:82:54:63:54:
         36:dd:01:78:61:a4:58:43:0e:1a:69:4c:54:bb:fb:92:2e:31:
         5e:c9:be:cd:46:5d:8b:f9:66:a1:87:01:53:5f:c8:11:23:7b:
         94:a6:7d:31:26:a1:a5:6a:dc:86:bf:1d:23:ff:0e:1c:58:9b:
         ff:a6:4a:4e:40:17:35:3a:c5:ed:e9:de:ca:74:9f:a5:25:5b:
         e0:8a:b6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sat Jan 1 15:30:37 2022 by LibreSSL & rpki-client.