Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/MyNypIznuBdqo9P_j16l3tkxqIA.roa (download)

Subject key identifier:   33:23:72:A4:8C:E7:B8:17:6A:A3:D3:FF:8F:5E:A5:DE:D9:31:A8:80 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS212032
Prefixes:
    1: 195.85.35.0/24 maxlen: 32

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/MyNypIznuBdqo9P_j16l3tkxqIA.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388498903 (0x172805d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Dec  1 06:09:01 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=332372a48ce7b8176aa3d3ff8f5ea5ded931a880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:60:b9:f6:d5:b7:77:36:43:3b:d1:d8:f0:
                    f2:8d:b5:64:0d:9a:85:17:a2:47:22:e1:c5:13:61:
                    10:f7:fe:64:01:5f:49:0e:51:af:22:2e:33:2f:db:
                    50:6f:48:fc:2f:b2:12:d3:44:fe:01:3c:1c:20:93:
                    c8:c3:9a:3e:4a:7c:f7:b4:d0:5b:bb:5e:86:a4:f0:
                    57:fa:05:d6:2a:4a:74:fc:f3:4e:0a:e4:0c:90:94:
                    54:9e:02:59:23:f1:91:e6:39:ff:42:6b:cc:19:e5:
                    7b:49:22:8f:41:6a:82:ed:1c:10:cb:57:0a:62:06:
                    09:f4:d5:8f:c1:e5:91:54:7a:1c:f3:97:e7:06:c7:
                    36:31:9d:f0:f4:f1:a0:a0:5f:1d:53:7c:ce:e6:88:
                    79:f1:5a:d9:00:0e:f2:32:df:21:0f:0d:78:5f:98:
                    8c:5a:48:37:d1:2e:57:a0:df:8b:c2:61:e1:f9:5e:
                    84:c6:51:4a:e7:b7:98:45:21:bb:8d:2d:ae:23:d5:
                    64:4e:e4:e1:f2:a7:4c:73:f0:b4:e0:a9:d2:c8:94:
                    8e:08:33:45:80:7e:4b:a5:93:89:f8:7b:6d:d6:e4:
                    95:d1:aa:bf:dd:17:15:e5:67:51:41:c1:df:35:18:
                    5e:2c:1b:5c:e1:34:5e:01:6e:d4:67:91:4f:bb:61:
                    c3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                33:23:72:A4:8C:E7:B8:17:6A:A3:D3:FF:8F:5E:A5:DE:D9:31:A8:80
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/MyNypIznuBdqo9P_j16l3tkxqIA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:53:a1:22:80:10:19:84:fd:51:3c:d9:8b:43:83:4e:56:47:
         4d:aa:2c:0a:37:65:fc:ef:2e:63:d2:1f:11:04:cc:2f:41:11:
         69:41:36:47:07:3e:cb:ac:5e:25:f2:da:7d:4a:0e:6e:9e:f9:
         ef:72:66:09:d0:92:ae:51:f2:50:15:0f:a4:57:41:68:54:f1:
         e3:be:2c:49:61:1e:56:b5:42:b7:ca:e3:b8:bb:d0:07:e5:2c:
         4f:0e:eb:cb:14:21:05:9c:58:9a:66:4a:22:ca:c8:43:34:b9:
         df:14:10:48:a8:02:6f:41:4d:48:60:5c:0d:eb:15:2a:2e:e2:
         95:62:ae:2c:02:43:53:c5:30:02:28:77:92:18:fd:0c:db:54:
         e6:54:ba:83:85:34:6e:3c:f9:2b:80:20:37:1f:cf:6d:7c:52:
         26:dc:68:1e:f0:19:fc:7c:2d:33:39:ad:b8:d0:cc:5c:8e:10:
         0c:ce:7d:bf:97:59:0b:bb:eb:f5:40:de:fe:a7:f4:7f:dd:0d:
         6b:18:04:cf:90:51:53:71:ff:78:4c:c3:ba:08:c3:66:c9:c1:
         c9:c4:aa:87:ca:31:19:12:bf:39:d8:4e:92:39:e0:36:9c:0d:
         b2:b6:8e:2b:18:da:d8:28:fa:d1:a1:92:35:4b:8b:49:f9:b2:
         f4:ff:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Wed Dec 1 07:57:47 2021 by LibreSSL & rpki-client.