Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/8VwGD6Ju6u31FN1aIfeQ785ypqY.asa
File: 8VwGD6Ju6u31FN1aIfeQ785ypqY.asa (raw, json)
Hash identifier: 2EVkc2FdigCsJsMQD46zPNOKaHe1bEaB67q+F9kJdks=
Subject key identifier: F1:5C:06:0F:A2:6E:EA:ED:F5:14:DD:5A:21:F7:90:EF:CE:72:A6:A6
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 019C290E379FF29FA1DAE6C147BA0532C876
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/8VwGD6Ju6u31FN1aIfeQ785ypqY.asa
Signing time: Wed 04 Feb 2026 14:28:43 +0000
ASPA not before: Wed 04 Feb 2026 14:28:43 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200240
Providers: AS: 42831
AS: 59796
Validation: Failed, certificate revoked on Mon 23 Feb 2026 22:15:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:29:0e:37:9f:f2:9f:a1:da:e6:c1:47:ba:05:32:c8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Feb 4 14:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f15c060fa26eeaedf514dd5a21f790efce72a6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:16:6e:3b:0b:18:3f:6a:a9:91:b6:07:85:
55:ad:03:72:7d:9a:c0:85:42:e7:79:e0:08:f9:c3:
6f:55:ad:a6:49:6a:be:da:89:d2:a6:74:18:69:8e:
9f:11:b3:8f:35:ce:52:0d:bb:2f:63:8c:44:45:b9:
63:7f:46:fc:da:84:15:10:1e:04:33:7a:67:e5:ca:
2c:47:22:85:05:c2:99:9c:f1:70:b7:6e:64:55:dc:
99:c3:4e:3a:82:3d:d6:17:b4:a9:d0:2b:0b:ee:1c:
49:8d:c2:b1:b0:7c:9d:4c:f5:10:bf:f4:5a:24:71:
e5:ca:a3:15:ba:86:85:39:85:82:39:25:59:01:22:
7d:58:81:c9:0e:f1:a5:c7:ed:07:b1:43:1c:20:c7:
47:a5:64:31:95:e5:97:e6:e0:bf:f1:32:b0:ce:21:
f1:5c:9f:42:a3:29:bc:9e:c9:69:cd:7d:f0:f5:6f:
27:05:48:97:d1:3b:73:12:b4:74:65:a7:66:f5:80:
bc:52:ed:e7:64:4e:50:d1:92:5a:5e:87:2e:82:63:
7c:a7:62:44:27:d4:5e:c1:01:00:e9:85:ba:e2:a9:
97:11:8a:28:dd:c8:53:ba:0b:fb:0c:62:b1:68:fb:
ea:2e:7d:66:bb:49:6d:66:51:ef:7b:14:07:e2:f5:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5C:06:0F:A2:6E:EA:ED:F5:14:DD:5A:21:F7:90:EF:CE:72:A6:A6
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/8VwGD6Ju6u31FN1aIfeQ785ypqY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200240
Signature Algorithm: sha256WithRSAEncryption
68:ab:2d:0d:e1:ba:1a:5b:ea:31:ee:cb:af:b7:5c:b9:2d:8d:
ec:f8:6e:05:96:fc:d5:3f:b1:36:bb:f8:95:8e:d1:ad:4a:2c:
a0:c3:cb:2b:31:13:91:9d:e0:7f:8a:17:4d:3c:a6:a4:25:37:
47:37:e9:81:cb:6e:f2:f5:ec:ad:c8:5f:6a:96:57:03:bb:ab:
2c:07:40:94:4a:c6:77:08:71:5c:a5:f8:3c:fa:d1:ca:0c:64:
42:d2:46:46:e5:ad:a3:d3:f8:a1:3f:e4:3b:fc:78:b7:64:59:
b9:34:e8:eb:3b:4d:99:cc:10:b8:a7:9e:87:79:e0:88:2c:f8:
9b:4f:e0:72:e7:ed:62:9d:23:b1:60:d7:7c:cf:6e:0a:c1:3a:
c8:1c:6d:06:a8:81:cb:61:2c:df:3b:c4:43:f6:cd:a7:a2:2b:
31:13:47:b1:dc:89:93:d3:44:2e:d4:c5:3d:a7:b5:a6:f7:59:
33:ca:92:25:fa:e3:86:7b:46:f2:ea:86:29:07:e2:9e:57:ee:
28:2a:1a:34:5b:fb:a5:2b:3e:7e:97:7d:d5:18:dc:2a:df:ad:
30:35:bc:e9:70:8d:47:81:83:74:0a:42:38:fb:77:e4:80:8c:
99:aa:51:0b:95:3c:69:2f:e7:62:10:b9:59:da:15:a4:92:c4:
1c:d4:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 12:13:36 2026 by rpki-client