Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/Riffi/0/AS216412.asa
File: AS216412.asa (raw, json)
Hash identifier: hFgsRXIKLohMqpFBgBknYApsWjvPNcGjOZyby2Rbf9E=
Subject key identifier: 8E:C9:BD:A9:02:F3:75:8F:84:DB:32:F4:7B:14:64:9E:80:3C:69:4B
Certificate issuer: /CN=cb2b40c722f645663a261d605d1c78bd1b720065
Certificate serial: 35F7031957A23470D9AA438637675768256A87B1
Authority key identifier: CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject info access: rsync://rpki.co/repo/Riffi/0/AS216412.asa
Signing time: Sun 08 Sep 2024 03:16:30 +0000
ASPA not before: Sun 08 Sep 2024 03:11:30 +0000
ASPA not after: Sun 07 Sep 2025 03:16:30 +0000
Customer ASID: 216412
Providers: AS: 0
Validation: Failed, certificate revoked on Mon 07 Oct 2024 10:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f7:03:19:57:a2:34:70:d9:aa:43:86:37:67:57:68:25:6a:87:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2b40c722f645663a261d605d1c78bd1b720065
Validity
Not Before: Sep 8 03:11:30 2024 GMT
Not After : Sep 7 03:16:30 2025 GMT
Subject: CN=8EC9BDA902F3758F84DB32F47B14649E803C694B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6d:72:fc:c5:80:1c:a8:33:00:db:b9:93:04:
6e:ee:8e:60:4c:ee:90:d9:08:59:de:c5:c0:c2:60:
ca:84:fd:c3:aa:0c:7d:9b:7d:6a:40:c4:49:60:3f:
cb:49:ec:bf:13:a3:1f:e8:cc:f8:39:00:ff:e0:31:
66:5b:65:19:07:0d:94:81:c9:74:96:ce:c1:5e:46:
c6:53:0d:b7:4e:8a:8a:a6:2f:46:25:04:3b:9e:9b:
8d:eb:a5:a0:ce:85:e4:9d:fb:dd:d9:f2:a2:0d:35:
87:4b:6c:03:ff:33:f7:ac:bb:e1:96:93:05:11:a5:
98:52:12:8e:8e:67:a0:08:63:4c:95:cb:b6:ba:bc:
17:40:d8:ab:9f:1e:02:c3:e2:16:15:6b:80:e0:33:
06:7f:2f:42:d8:61:2b:2a:f3:6f:28:13:42:47:15:
78:f5:94:56:65:9e:62:9e:8a:17:f8:9a:4f:b7:15:
54:91:46:1c:7b:5f:8c:e6:02:1d:6f:4d:19:2b:1b:
dc:1f:d2:42:d6:63:23:aa:13:6b:8c:b5:6f:7c:43:
f5:91:88:a6:56:46:e2:77:63:50:f4:55:82:e9:6c:
1d:85:de:a1:0b:ea:e7:84:15:fe:93:d7:ec:a1:a9:
fb:b9:39:d0:40:e8:c0:74:6d:ba:bc:d7:6d:23:e9:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C9:BD:A9:02:F3:75:8F:84:DB:32:F4:7B:14:64:9E:80:3C:69:4B
X509v3 Authority Key Identifier:
keyid:CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Riffi/0/AS216412.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216412
Signature Algorithm: sha256WithRSAEncryption
89:7b:24:34:d2:f4:f2:a3:65:ce:99:50:fa:de:a1:db:75:05:
6a:53:35:05:ee:b6:41:76:1e:71:37:4a:80:5a:02:76:0c:43:
53:9b:79:b8:52:4c:bb:fa:bb:40:e9:67:5d:5b:56:2e:7a:b0:
48:b3:36:fa:43:ad:fb:ff:5a:74:78:ca:36:87:0b:8f:76:df:
30:f2:80:e6:d1:8c:b9:13:8e:bb:fb:a9:8e:f7:fa:75:d3:cc:
c6:ef:f1:11:0d:84:1f:14:fa:09:c3:c8:2a:8b:ab:2b:89:91:
fd:cb:d8:df:40:08:ce:68:c8:77:66:7b:02:86:cb:2c:4a:9d:
21:a0:4b:d4:4a:ba:e8:ac:4e:3b:2b:25:81:2e:ce:0b:b9:a9:
7c:3b:ba:ee:79:26:6a:7e:dc:a7:a9:98:44:02:48:a3:b4:dd:
2d:fb:db:9c:60:4b:f4:85:c3:69:71:40:e1:f9:a1:92:ef:04:
24:57:c7:ab:88:6b:08:8a:90:05:f7:8c:aa:dc:6f:3a:22:3e:
42:9a:24:71:63:45:85:0f:06:6f:83:f8:88:18:cf:a7:ae:9f:
fa:bb:21:05:50:80:a1:17:e0:49:06:ae:e6:ee:6d:17:4f:34:
1c:ef:d7:31:e4:96:99:15:3e:a7:de:b7:6f:e8:01:0c:18:92:
c8:06:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 14:40:53 2024 by rpki-client on console-ams.rpki-client.org