Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/01guwt2yB4o_s8RKQwPjgg5N7dk.roa (download)

Subject key identifier:   D3:58:2E:C2:DD:B2:07:8A:3F:B3:C4:4A:43:03:E3:82:0E:4D:ED:D9 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS212351
Prefixes:
    1: 185.120.34.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/01guwt2yB4o_s8RKQwPjgg5N7dk.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265263088 (0xfcf97f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 06:55:31 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=d3582ec2ddb2078a3fb3c44a4303e3820e4dedd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:ab:d0:0c:ae:0a:e5:9f:88:4f:83:57:70:
                    0e:9b:5b:37:56:f6:1b:e6:b0:17:82:8a:85:5a:60:
                    1f:bd:f1:57:af:b0:e9:92:40:c8:73:f3:cf:a7:ed:
                    12:8b:5a:cd:fd:03:7f:90:2c:12:8e:05:d5:3f:38:
                    2a:72:b4:02:e8:f3:fb:e8:af:20:b8:25:7b:33:b0:
                    6f:83:b0:cc:79:d8:ea:9f:b7:92:63:0f:f6:f7:10:
                    b7:c4:74:02:96:80:20:29:c9:04:7c:97:eb:3c:c2:
                    e8:62:e8:0d:1c:96:cd:07:02:ed:7c:ef:c4:94:a4:
                    16:b1:e1:cb:24:72:3d:ec:be:87:51:5f:7e:da:d3:
                    39:06:e9:1a:13:1b:5c:8f:d6:62:84:bd:f6:ea:ac:
                    e9:ec:25:15:ff:91:3f:21:07:a3:33:0b:87:ed:21:
                    38:3e:f6:18:0f:ef:03:ac:4e:64:45:c8:48:40:4f:
                    cf:9b:8c:df:29:42:f5:40:e5:f4:6a:c7:fb:ca:fa:
                    63:c8:81:bd:59:3f:fc:df:72:a7:59:50:84:8c:d8:
                    58:3b:5f:2c:c1:ff:1e:b0:e7:34:06:3e:a8:a4:1e:
                    f7:42:79:4a:08:12:b0:7a:87:1d:3d:2e:75:bb:6c:
                    af:bf:8a:80:6d:9e:aa:77:96:e1:17:61:ff:62:d5:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D3:58:2E:C2:DD:B2:07:8A:3F:B3:C4:4A:43:03:E3:82:0E:4D:ED:D9
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/01guwt2yB4o_s8RKQwPjgg5N7dk.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.120.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:bd:40:15:e8:ce:7c:ff:35:67:ef:b0:9f:7b:09:87:c6:77:
         f4:92:58:c2:f1:61:0e:4c:40:e9:5d:b9:fb:cc:e4:05:26:31:
         26:6e:72:e7:6c:31:a7:1c:5b:bd:f2:51:d5:3b:81:bf:60:b5:
         12:d8:bb:49:b6:73:0f:27:fc:22:25:17:97:9b:71:e8:8f:22:
         c4:13:e6:2c:7e:10:2e:f9:48:b7:31:48:2d:c4:b8:84:29:3e:
         e2:b9:df:cf:2e:3b:77:80:2a:88:9c:75:8c:27:1b:f7:25:54:
         cf:f1:72:60:d0:73:c5:ca:0a:27:1e:f3:b5:5e:5b:9e:43:47:
         13:76:d1:11:67:4d:f4:de:ad:f4:c4:ba:97:93:94:01:18:1f:
         6f:cb:e7:bf:f1:93:f5:f8:39:25:86:56:9f:57:b0:47:70:8e:
         6c:0b:0a:82:20:a9:fd:9c:27:ca:c4:0b:da:2c:66:19:d2:bb:
         e9:f7:b3:9d:d8:0d:41:97:59:1f:62:a4:81:db:cb:49:0f:65:
         d4:d9:5d:16:88:da:27:6c:5d:47:45:bf:8d:39:dc:95:3b:ec:
         fc:73:25:7d:7d:97:2b:24:dc:a8:64:9d:5b:1a:e0:77:e2:83:
         17:83:5d:e6:2c:dc:53:e5:06:a2:cd:41:b7:1d:8b:1e:1a:92:
         27:40:f6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:04:49 2021 by LibreSSL & rpki-client.