Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/Riffi/0/AS203868.asa
File: AS203868.asa (raw, json)
Hash identifier: ykBScog8L3YbLqtn7b78k0Xt20RYYOV/etTkr4E7lu8=
Subject key identifier: 60:33:A7:EE:C0:F0:62:54:F8:98:B4:77:A7:74:D7:A4:4D:52:FB:3E
Certificate issuer: /CN=cb2b40c722f645663a261d605d1c78bd1b720065
Certificate serial: 53942213D16992881B5FF5D6BC65CF68C2F84A03
Authority key identifier: CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject info access: rsync://rpki.co/repo/Riffi/0/AS203868.asa
Signing time: Thu 12 Sep 2024 10:02:52 +0000
ASPA not before: Thu 12 Sep 2024 09:57:52 +0000
ASPA not after: Thu 11 Sep 2025 10:02:52 +0000
Customer ASID: 203868
Providers: AS: 924
AS: 6939
AS: 8772
AS: 29632
AS: 39249
AS: 44817
AS: 150249
AS: 150462
AS: 151992
AS: 152825
AS: 203913
AS: 207656
AS: 209533
AS: 210475
AS: 210645
AS: 215143
Validation: Failed, certificate revoked on Mon 07 Oct 2024 10:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:94:22:13:d1:69:92:88:1b:5f:f5:d6:bc:65:cf:68:c2:f8:4a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2b40c722f645663a261d605d1c78bd1b720065
Validity
Not Before: Sep 12 09:57:52 2024 GMT
Not After : Sep 11 10:02:52 2025 GMT
Subject: CN=6033A7EEC0F06254F898B477A774D7A44D52FB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:4f:fd:d9:bf:7f:28:61:5d:fb:63:bf:a8:
bd:1a:df:86:26:64:7d:83:37:5e:ef:ca:2f:a3:15:
4f:fd:e4:c0:91:dc:d1:46:bf:bf:7a:60:e0:3a:2e:
74:00:41:d9:5e:e3:96:d5:1e:71:4e:be:2d:09:d2:
b4:e6:02:24:33:1e:10:8e:dd:77:e3:e2:4b:32:1a:
6d:7b:fd:13:6f:fd:cd:38:a2:15:f5:14:85:6f:dc:
1a:a9:bc:f3:54:89:2a:42:c1:9a:47:86:03:db:e4:
e2:7a:a6:80:d6:10:af:8a:04:df:1c:25:cb:9d:c4:
14:8b:b8:d5:e3:e3:80:6e:16:12:3c:88:23:81:45:
f8:e5:b1:53:3c:9d:29:2d:e6:62:02:b9:a7:d4:3a:
24:a2:e0:14:f9:05:86:d9:ef:e5:d3:b3:7b:55:10:
b4:43:d2:e2:85:f8:65:87:30:ce:d0:c1:19:b3:1f:
96:91:47:08:ca:a1:fd:7a:2e:25:e5:99:a5:ed:d8:
69:55:cf:32:5f:ed:c8:19:00:34:5f:6b:da:f9:57:
87:92:05:0f:d2:60:85:70:2f:4a:85:e9:73:1f:96:
8e:a5:d1:b5:05:11:55:f5:e8:92:55:24:1c:76:6f:
6d:31:92:fc:2f:7a:9e:06:61:b8:7b:13:9e:16:92:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:33:A7:EE:C0:F0:62:54:F8:98:B4:77:A7:74:D7:A4:4D:52:FB:3E
X509v3 Authority Key Identifier:
keyid:CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Riffi/0/AS203868.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203868
Signature Algorithm: sha256WithRSAEncryption
04:d5:15:09:02:e2:d7:a8:18:46:6d:4f:62:cc:2a:8b:71:cf:
5b:f2:53:27:66:2f:3a:b5:52:d7:b2:fd:0f:88:38:87:a3:0f:
62:8f:e1:09:3f:3a:62:31:65:49:39:39:05:f9:96:0c:de:3b:
f3:78:0c:ed:27:cf:22:b7:05:15:0c:61:90:4b:91:87:3f:ff:
b1:41:17:34:fe:dd:a2:21:88:94:13:44:db:d9:14:12:f9:c5:
27:45:e9:c3:89:5b:58:86:46:2e:f6:60:92:72:a7:98:51:83:
99:7b:52:ad:0d:e4:d3:7c:ea:aa:37:ea:45:b9:9a:d5:07:e2:
8d:e4:b6:4d:2e:8c:a5:a7:45:84:2d:b8:83:6b:7e:75:78:11:
2c:b7:45:a4:e0:e8:c0:69:77:a4:75:ac:21:a1:1c:db:fc:fe:
74:ed:bb:19:d2:2e:66:eb:c5:2c:b4:30:9a:fb:b8:ea:8e:cd:
7a:53:e1:d9:58:59:2b:f7:3e:96:25:ed:21:cf:c8:2b:34:da:
93:bc:6c:01:9b:81:7a:98:7b:de:0c:3c:63:22:03:5f:1d:02:
94:81:9d:51:3f:bb:c3:63:14:74:80:12:57:c8:cd:f5:14:7e:
b7:d6:7a:70:9a:df:73:df:3c:f4:a1:19:5b:e5:8b:cc:d7:7a:
52:fa:08:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 14:40:53 2024 by rpki-client on console-ams.rpki-client.org