Route Origin Authorization
Location:                 rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/v1jZkHfJUYzvpJC-H-3zwQgqokY.roa (download)

Subject key identifier:   BF:58:D9:90:77:C9:51:8C:EF:A4:90:BE:1F:ED:F3:C1:08:2A:A2:46 
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
asID:                     AS398859
Prefixes:
    1: 85.117.242.0/24 (max: 24)

--
$ test-roa -p rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/v1jZkHfJUYzvpJC-H-3zwQgqokY.roa | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87952675 (0x53e0d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jan  1 02:46:29 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=bf58d99077c9518cefa490be1fedf3c1082aa246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:ec:52:94:5a:fc:cd:0b:fa:c1:bb:5c:07:
                    13:37:60:e2:2c:af:32:0f:1a:95:ec:36:ec:80:6f:
                    d1:2e:10:e4:4d:70:4b:e1:b3:89:f0:63:1a:3d:2a:
                    6a:ca:3f:de:2f:1d:42:2c:18:39:c7:9e:7d:2b:e4:
                    ff:1e:4a:ab:2e:2f:20:b3:6f:49:9f:48:9c:67:30:
                    be:ce:af:36:01:13:d3:b9:47:30:33:c4:b9:7a:ea:
                    1f:75:4c:3a:23:37:f9:8f:dc:6c:37:9d:8d:70:f6:
                    aa:f3:8f:12:0f:11:1c:b7:de:e5:3a:3c:bc:db:cd:
                    c4:14:4f:f3:1d:c1:0f:a7:b9:8f:da:7d:c1:55:0b:
                    60:71:43:07:00:9f:c1:8f:75:d0:e4:05:8a:56:21:
                    f3:04:2c:47:95:0b:c4:a4:bc:e7:62:af:58:e0:08:
                    31:89:91:c5:61:b2:d6:b4:10:1b:57:5e:77:6f:63:
                    67:e1:fe:b8:1a:3c:97:3d:14:24:e9:ce:62:f0:53:
                    1e:a4:8d:8c:a2:4b:9d:f6:16:4d:2a:41:eb:9d:e0:
                    fb:c9:c4:7a:b8:94:85:dc:52:43:42:0d:45:fd:b2:
                    18:95:0b:5f:d9:08:72:8f:04:b4:b3:fe:8d:d9:f9:
                    af:91:1a:3f:d2:df:67:03:c5:b2:73:d1:b4:1d:64:
                    a0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BF:58:D9:90:77:C9:51:8C:EF:A4:90:BE:1F:ED:F3:C1:08:2A:A2:46
            X509v3 Authority Key Identifier: 
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/v1jZkHfJUYzvpJC-H-3zwQgqokY.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.117.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:81:12:25:5c:17:d9:ad:0d:a1:66:8e:63:2c:1c:eb:42:32:
         fe:3c:9a:d9:23:63:83:34:1e:98:5a:86:1b:eb:70:8d:da:f9:
         09:98:a1:5a:a5:8a:b9:e7:b1:69:b9:92:35:e7:da:a1:a8:a9:
         55:46:c9:6d:3f:18:3f:0e:b8:41:6f:fc:bc:37:7b:d9:0f:f7:
         c6:b2:0a:e0:87:59:82:7d:94:12:ca:5b:34:d8:15:9b:ad:ed:
         7d:2b:c3:8e:48:e6:6a:17:2a:b8:2c:f8:6d:62:e6:27:8d:af:
         e1:49:c7:bc:5d:ea:be:56:2a:c5:34:4e:38:c8:fa:f3:eb:b0:
         eb:0f:b4:f2:2c:5c:e0:25:5c:72:ba:f6:be:ef:ba:32:38:53:
         2e:48:19:eb:95:95:31:ff:19:6e:3a:7e:d4:49:3f:86:df:f9:
         6d:f4:21:4e:29:6b:c5:d1:6f:78:84:a4:24:d6:ff:4b:e8:ea:
         9a:24:b1:0f:12:d2:bf:13:54:41:85:0f:14:9c:55:91:4f:bd:
         fc:40:ae:ca:bd:b5:c3:94:96:22:4d:b9:c6:55:06:56:a9:9a:
         a8:40:5e:83:b5:84:50:d6:bf:a1:49:89:ea:4f:01:af:bb:d7:
         ca:c6:8f:39:11:5c:7b:51:b8:9d:32:a9:29:b8:f1:15:e7:e6:
         f2:31:e5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 12:11:14 2021 by LibreSSL & rpki-client.