Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/BJ-9r0YNyGS0DsPlIPszg9O544I.asa
File:                     BJ-9r0YNyGS0DsPlIPszg9O544I.asa (raw, json)
Hash identifier:          v4k72gWmMxGCIGFvbtzZbGq4vYzpsjU266fT0Vynyw0=
Subject key identifier:   04:9F:BD:AF:46:0D:C8:64:B4:0E:C3:E5:20:FB:33:83:D3:B9:E3:82
Certificate issuer:       /CN=f1e7ac96796cf35c0b4024b446b984c0f7c2e9d5
Certificate serial:       01A0E1EE6D8C43489385161B0D51E9F7EC40
Authority key identifier: F1:E7:AC:96:79:6C:F3:5C:0B:40:24:B4:46:B9:84:C0:F7:C2:E9:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8eeslnls81wLQCS0RrmEwPfC6dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/BJ-9r0YNyGS0DsPlIPszg9O544I.asa
Signing time:             Sun 27 Sep 2026 08:14:54 +0000
ASPA not before:          Sun 27 Sep 2026 08:14:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218617
Providers:                AS: 212895
Validation:               Failed, certificate revoked on Fri 02 Oct 2026 20:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:ee:6d:8c:43:48:93:85:16:1b:0d:51:e9:f7:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1e7ac96796cf35c0b4024b446b984c0f7c2e9d5
        Validity
            Not Before: Sep 27 08:14:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=049fbdaf460dc864b40ec3e520fb3383d3b9e382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:c3:92:5f:46:5d:63:b9:a6:6c:1f:f3:aa:
                    1d:84:ae:e9:3e:1c:ea:ec:94:6f:16:4d:67:5b:78:
                    70:37:7d:db:ca:7e:ca:6e:e1:3d:07:ef:4a:18:44:
                    20:54:97:a4:d8:b2:e0:b6:91:a1:4d:81:5a:1b:ff:
                    43:31:a3:8d:23:4e:b2:fd:a9:20:6b:5c:65:f4:1d:
                    58:da:f7:ea:cd:de:83:35:f7:25:19:b3:53:48:73:
                    aa:58:4e:3b:e6:98:a0:0c:0a:f9:e0:4f:8e:f1:eb:
                    85:65:44:ca:e6:6e:3f:ce:61:1e:89:11:8b:f3:f8:
                    41:c8:da:a1:dc:4e:d6:9a:50:e2:d1:de:83:a4:8e:
                    f7:56:78:81:a1:6d:00:8e:85:43:66:c0:37:85:ad:
                    f9:b9:58:89:d1:83:8f:64:28:42:d9:0b:a3:e0:b5:
                    22:3d:2d:45:1a:39:9e:d1:ba:a3:12:86:7f:a1:8d:
                    76:32:82:36:36:32:19:98:7b:a0:db:4d:cc:89:55:
                    db:1f:58:bd:d8:3d:94:f4:75:dd:cc:5d:26:36:90:
                    21:32:11:f3:5e:3b:e3:b8:5a:9f:af:e6:d0:a4:78:
                    c1:b8:97:b8:bd:2b:38:4b:cd:e3:d1:a8:4b:d8:fb:
                    6e:28:da:de:70:1d:e3:03:a9:60:35:4c:a2:a2:ba:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9F:BD:AF:46:0D:C8:64:B4:0E:C3:E5:20:FB:33:83:D3:B9:E3:82
            X509v3 Authority Key Identifier:
                keyid:F1:E7:AC:96:79:6C:F3:5C:0B:40:24:B4:46:B9:84:C0:F7:C2:E9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eeslnls81wLQCS0RrmEwPfC6dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/BJ-9r0YNyGS0DsPlIPszg9O544I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bc8558-5a19-4996-8fe8-182e7c024bce/1/8eeslnls81wLQCS0RrmEwPfC6dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218617

    Signature Algorithm: sha256WithRSAEncryption
         84:61:0c:34:08:62:1d:cc:3f:7c:78:a3:cd:14:55:c4:e9:b9:
         7c:4a:ee:e6:01:0c:c8:f9:31:40:27:60:73:7b:1c:64:8b:63:
         27:81:e2:23:13:45:04:40:e2:2b:5a:2f:96:2b:8b:4a:c4:43:
         1f:e9:35:c3:8e:cb:47:a3:ae:0a:b3:55:e0:ed:d9:4c:3c:15:
         8c:0d:82:83:f2:ed:44:cb:53:26:dd:d7:a5:60:69:2b:d6:ac:
         03:16:52:2b:ed:61:b2:68:88:08:54:26:e6:22:37:96:1c:e0:
         ef:e5:c3:2a:df:ac:f6:70:42:ff:20:e3:10:49:d7:81:99:77:
         cf:88:18:9f:ef:5b:11:f7:95:c9:ed:2b:4e:88:23:0c:e8:68:
         e1:88:40:62:cf:d9:4d:72:4e:35:8c:08:5f:65:fe:6f:44:0c:
         c8:81:d7:a8:92:25:cb:14:b5:b3:56:d4:bf:f8:dc:56:89:5d:
         39:d9:82:9d:be:7f:67:54:61:ca:7f:de:9b:aa:09:c6:e8:c5:
         83:01:28:11:5b:89:7f:d5:78:a0:f1:55:a8:51:de:f3:a9:46:
         a9:96:b3:02:41:73:9d:e3:c3:67:7a:04:c2:f0:0f:85:b7:26:
         1d:e9:af:77:99:b6:05:9b:bf:15:fb:68:55:8a:68:1e:6d:a1:
         c0:0b:bb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:45:12 2026 by rpki-client