Autonomous System Provider Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/AS970.asa
File: AS970.asa (raw, json)
Hash identifier: aCqAqa36+Xna3fhTNM72Gk6jiiHCna4r5yVWhBqXYrs=
Subject key identifier: 71:2C:0C:18:EE:6A:FF:96:36:ED:75:4A:33:CB:A7:47:16:CF:2D:FE
Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial: 47F52D94B11189731C814AD15747CD886DE4AFD3
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS970.asa
Signing time: Sat 30 Aug 2025 20:28:19 +0000
ASPA not before: Sat 30 Aug 2025 20:23:19 +0000
ASPA not after: Sat 29 Aug 2026 20:28:19 +0000
Customer ASID: 970
Providers: AS: 54874
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f5:2d:94:b1:11:89:73:1c:81:4a:d1:57:47:cd:88:6d:e4:af:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Validity
Not Before: Aug 30 20:23:19 2025 GMT
Not After : Aug 29 20:28:19 2026 GMT
Subject: CN=712C0C18EE6AFF9636ED754A33CBA74716CF2DFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:0b:cc:3c:82:2b:ec:47:7a:82:20:1e:9e:
86:81:89:9c:da:62:58:0e:f1:cc:59:97:04:08:ff:
8c:fe:86:f6:99:6a:11:a7:06:dd:ea:14:b7:fd:04:
42:2e:42:b5:6f:fa:03:8d:3f:43:f5:7f:06:44:6e:
0b:15:49:e6:f0:1d:b1:12:bc:73:16:e7:14:64:b0:
cb:be:1e:63:fd:17:db:43:70:a3:24:3a:e8:e2:59:
d7:96:85:76:e1:8d:1b:78:73:4c:3e:a7:e3:64:6c:
57:13:43:03:9d:91:89:cc:cd:37:ff:98:f5:0f:7f:
f6:d3:ec:a8:a5:d8:db:24:77:86:59:1e:65:84:07:
08:e3:a1:d3:b2:75:e8:62:f3:da:11:5a:d3:80:91:
98:18:32:75:93:7a:76:6d:4b:96:8d:98:0c:17:f0:
42:f9:7e:89:da:af:b3:50:8a:20:41:76:70:e9:8a:
cb:33:58:fd:22:16:37:1e:3e:3b:6e:67:f2:47:0f:
0a:ee:50:84:00:a9:aa:02:af:f2:44:67:b4:a6:9f:
63:43:b7:f2:55:3c:ac:26:99:c9:d7:ff:38:28:61:
15:64:ca:ee:67:6b:88:c0:12:10:52:2e:34:e8:f2:
27:7c:cb:13:00:74:bd:01:29:a0:f9:3c:14:1a:fc:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2C:0C:18:EE:6A:FF:96:36:ED:75:4A:33:CB:A7:47:16:CF:2D:FE
X509v3 Authority Key Identifier:
keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS970.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
970
Signature Algorithm: sha256WithRSAEncryption
b7:86:96:83:65:e1:08:c7:50:aa:62:9e:f3:bb:45:12:f7:94:
87:c6:d7:7b:84:12:2e:56:f2:41:7f:a6:b6:62:a9:f5:3f:d6:
66:82:b6:60:58:7a:0b:f1:58:20:86:86:32:79:f5:8a:50:c9:
fc:3e:3c:f7:05:4f:81:77:09:c8:d3:67:77:a9:90:7c:f7:42:
dc:92:90:95:02:07:cb:6a:7d:a4:46:0b:6d:50:ce:42:f6:9f:
59:f1:e1:ef:58:76:4b:e6:0b:9c:9c:d9:f4:f7:8a:d1:83:d1:
1c:3c:fb:d4:a2:17:e0:a7:98:2f:55:37:bf:53:35:4c:ed:f4:
3f:f5:3b:fb:7f:f8:67:50:50:8b:a8:3c:ee:f4:f4:2a:92:30:
b4:92:64:73:57:29:5d:8d:20:86:fa:ff:a6:e4:4c:cd:b9:99:
a8:96:e1:df:68:76:0d:71:ec:94:cf:fb:4c:64:bf:04:48:e7:
5e:11:81:bc:4d:49:b9:b1:90:7c:29:68:05:48:88:8d:6c:a9:
62:69:e7:d1:22:70:f3:a6:b2:fa:34:d3:80:f9:ea:48:69:ee:
c6:56:e7:33:9d:26:b1:3b:ce:a2:f8:43:ce:7a:c1:7f:04:9b:
24:0c:d5:ef:17:e2:26:27:a7:78:7c:78:6e:fd:6a:5b:7a:be:
de:0a:14:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 00:13:18 2025 by rpki-client