Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/HxCQoY1pq0QBJxIzXS6TyizjztQ.asa
File: HxCQoY1pq0QBJxIzXS6TyizjztQ.asa (raw, json)
Hash identifier: FaLt49G6xYi0pL7XXopVcBPXas22uAHvv5DCFc3jDFU=
Subject key identifier: 1F:10:90:A1:8D:69:AB:44:01:27:12:33:5D:2E:93:CA:2C:E3:CE:D4
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 019C1E86B41BBE204B7B5B6D85B950DA311F
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/HxCQoY1pq0QBJxIzXS6TyizjztQ.asa
Signing time: Mon 02 Feb 2026 13:24:30 +0000
ASPA not before: Mon 02 Feb 2026 13:24:30 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 200040
Providers: AS: 9121
AS: 15924
AS: 34984
Validation: Failed, certificate revoked on Sat 21 Feb 2026 05:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:86:b4:1b:be:20:4b:7b:5b:6d:85:b9:50:da:31:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Feb 2 13:24:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f1090a18d69ab44012712335d2e93ca2ce3ced4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:09:45:9b:84:39:1d:59:90:23:db:6a:f5:
fa:12:f7:f5:75:fd:5e:a9:48:a6:69:83:84:7e:ba:
d9:5c:2d:b2:24:9e:63:85:16:f2:f8:b1:07:80:e5:
78:cb:83:6d:26:b5:25:88:85:87:04:2b:50:4d:c5:
ab:74:31:fc:07:ba:91:0b:d9:06:a0:49:40:21:5e:
98:3b:5a:b2:90:64:6d:e8:bd:a6:63:8d:67:26:23:
d0:fb:85:87:f8:bf:fe:88:62:85:51:77:ec:34:f5:
6b:6f:0f:ec:f2:9d:3b:4a:75:f0:10:42:f8:53:07:
e9:21:49:b0:fd:0d:6d:b8:5c:6e:8c:a0:0a:b2:8f:
c1:66:65:c7:0f:cd:d3:03:39:70:ed:18:15:66:86:
7c:2e:8e:19:cd:36:82:2c:ab:16:cc:dd:9e:da:03:
6d:e1:1e:9e:ff:87:2d:ce:ec:cd:89:1c:13:61:1c:
53:b7:5a:14:ef:f1:32:a6:61:f6:95:28:57:ec:10:
43:16:42:93:58:ba:1c:4a:95:f4:8f:d6:5c:a1:4c:
2c:e7:13:8f:3e:08:69:12:33:47:cf:12:c3:55:b0:
92:45:a4:3a:9c:e6:c7:29:49:ce:a9:a9:fb:8b:9f:
ac:cc:85:db:1f:3d:e8:e3:25:d5:2a:ea:55:09:22:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:90:A1:8D:69:AB:44:01:27:12:33:5D:2E:93:CA:2C:E3:CE:D4
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/HxCQoY1pq0QBJxIzXS6TyizjztQ.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200040
Signature Algorithm: sha256WithRSAEncryption
6c:07:25:1c:80:e9:2b:ec:eb:89:af:02:81:93:b7:dd:7d:d9:
50:17:8d:4a:0b:9e:d5:9c:61:94:3f:31:17:4f:fe:13:cc:38:
ec:f2:eb:06:d3:87:c8:84:05:41:b2:1b:92:93:a8:16:11:e3:
ff:c2:5a:f5:a9:94:12:24:2a:48:3b:70:11:10:97:b9:5b:2b:
a5:32:38:fe:ee:52:e4:cf:3e:c2:07:20:71:7c:5e:df:fa:d8:
f9:29:5c:f5:52:6f:60:50:f4:e2:92:85:4f:52:f0:2b:4f:8c:
a0:49:5b:1c:5d:77:45:8d:90:79:dc:95:8f:3d:f6:ba:e2:72:
ac:c1:df:1e:28:8c:6c:cd:16:6f:13:9e:27:39:e7:a7:fc:4e:
fc:e1:cc:b7:14:29:81:a4:f8:3a:39:c2:fb:e2:83:85:bb:47:
bb:1a:0c:cc:72:58:3c:32:58:f2:84:c7:a3:96:d1:a3:c2:52:
76:a9:7e:24:12:03:e4:30:79:6e:ef:57:d2:46:d1:81:1a:86:
39:35:da:3e:96:c9:b9:1c:07:25:8f:55:23:58:a5:ce:ed:95:
c8:f6:a4:f4:6c:5d:53:91:a6:4b:8b:4a:34:d4:e7:bd:2c:31:
9e:88:3e:b9:51:17:dd:92:b0:2e:95:a3:d2:a1:ee:2f:f2:6f:
77:9c:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:15:42 2026 by rpki-client