Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Qv0-WOveSHK-8gipCgbrXLu8D-s.roa (download)

Subject key identifier:   42:FD:3E:58:EB:DE:48:72:BE:F2:08:A9:0A:06:EB:5C:BB:BC:0F:EB 
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
asID:                     AS398397
Prefixes:
    1: 194.34.231.0/24 (max: 32)
    2: 185.120.20.0/23 (max: 32)
    3: 185.207.177.0/24 (max: 32)
    4: 195.85.41.0/24 (max: 32)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Qv0-WOveSHK-8gipCgbrXLu8D-s.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308952479 (0x126a3d9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Apr 15 05:03:58 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=42fd3e58ebde4872bef208a90a06eb5cbbbc0feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:dc:48:81:bd:a0:3d:b9:04:c3:07:bb:e2:
                    fa:e2:56:e4:d1:e4:a5:05:2d:6d:f8:3d:7f:24:76:
                    c5:ae:09:f4:20:1b:a9:50:37:f0:ec:37:17:b6:df:
                    b4:a6:24:49:d5:39:a2:e2:69:48:38:a6:d0:48:d7:
                    82:bb:70:ff:a4:90:93:ad:f6:69:54:7d:26:80:de:
                    80:ec:8e:38:8e:28:78:5e:0f:be:c7:73:ab:fb:0e:
                    2f:88:08:c5:72:e9:17:c8:83:a3:27:bf:cc:31:18:
                    99:a6:1e:42:54:6b:ef:2d:d6:8a:b3:d0:74:40:15:
                    ac:31:2f:be:4c:f8:8b:d8:c0:a2:93:42:5f:3c:00:
                    24:de:9f:ca:7d:80:e1:12:95:19:c9:b6:8a:e5:9f:
                    2b:9d:cb:b8:96:68:86:9a:53:1d:60:79:e0:56:01:
                    30:80:d8:97:2d:f9:58:f6:ea:0a:ae:76:aa:ef:b3:
                    20:57:6e:fd:22:ae:48:5d:3c:16:9b:d6:17:27:32:
                    c9:82:d3:b7:55:fd:68:23:cb:f7:91:af:1e:95:c1:
                    41:7b:82:8a:6b:16:18:42:97:ea:be:02:f0:7a:87:
                    e2:b9:fe:42:79:5e:bb:2a:6b:95:e8:66:09:e9:ac:
                    20:cc:a7:a3:e2:25:20:0a:68:38:ec:c9:e4:ba:d6:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:FD:3E:58:EB:DE:48:72:BE:F2:08:A9:0A:06:EB:5C:BB:BC:0F:EB
            X509v3 Authority Key Identifier: 
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Qv0-WOveSHK-8gipCgbrXLu8D-s.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                0 0.....0.....x...........".....U)
    Signature Algorithm: sha256WithRSAEncryption
         3f:29:a7:ff:81:2c:17:83:d8:aa:09:ae:1a:00:02:c2:03:27:
         0c:bc:9e:9b:6b:89:e5:35:b1:29:a6:41:94:27:7f:f8:78:43:
         ac:e2:2e:55:c3:c2:33:44:64:cf:ab:53:ca:65:0a:ca:13:96:
         d2:d9:29:8b:77:3a:b6:d5:cf:e5:91:fd:e3:2f:c4:15:78:88:
         11:e4:d1:e0:33:8b:78:f8:a0:4f:dc:63:98:2e:90:ab:b1:ae:
         3c:1e:8c:7b:12:7f:86:10:ad:59:76:00:7e:7e:ac:68:ab:65:
         51:e7:4f:de:77:13:91:01:89:54:1d:8b:9d:d1:26:8d:33:1a:
         c9:28:c7:16:26:18:32:6b:8a:a6:cc:5d:59:d8:c1:ec:44:45:
         c9:e7:c6:e8:a0:9c:9e:4a:ee:f0:ff:fa:4e:a1:1a:9d:3c:3b:
         0c:1c:d9:ca:b6:a2:a4:c0:45:01:03:ad:d0:22:f9:67:e5:3a:
         1b:03:13:b1:3c:86:f8:94:54:93:56:39:b6:0f:d0:72:08:0d:
         8b:7e:1e:60:61:77:44:c3:0b:2a:3f:2d:ce:32:9f:7e:68:fc:
         34:52:4e:cd:68:d1:95:16:ca:3b:cb:04:21:38:4f:cb:20:21:
         cd:c1:cb:e7:52:46:82:cd:0b:69:62:f0:7e:23:55:e3:87:aa:
         a2:00:8d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Mon May 3 17:46:06 2021 by LibreSSL & rpki-client.