Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/vXHg6dHsBx1DeJVcWB_2f9bko2Q.asa
File:                     vXHg6dHsBx1DeJVcWB_2f9bko2Q.asa (raw, json)
Hash identifier:          RUvZKJ8fsVz5YArQjqZ4989JQ5Cq/yk7hMDfZPNnspw=
Subject key identifier:   BD:71:E0:E9:D1:EC:07:1D:43:78:95:5C:58:1F:F6:7F:D6:E4:A3:64
Certificate issuer:       /CN=ae800ede833b86c48ce3705567068eb90724b08d
Certificate serial:       019CB3E0E81A10EB563D051731F977309EF5
Authority key identifier: AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/vXHg6dHsBx1DeJVcWB_2f9bko2Q.asa
Signing time:             Tue 03 Mar 2026 13:26:26 +0000
ASPA not before:          Tue 03 Mar 2026 13:26:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201616
Providers:                AS: 8283
                          AS: 41051
                          AS: 48070
                          AS: 212396
                          AS: 212635
                          AS: 215638
Validation:               Failed, certificate revoked on Thu 05 Mar 2026 16:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b3:e0:e8:1a:10:eb:56:3d:05:17:31:f9:77:30:9e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae800ede833b86c48ce3705567068eb90724b08d
        Validity
            Not Before: Mar  3 13:26:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd71e0e9d1ec071d4378955c581ff67fd6e4a364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:a2:c9:7a:37:b8:71:57:6e:2f:0f:b2:51:
                    9f:ea:d5:ab:e2:de:ac:bb:69:df:70:71:d2:fd:85:
                    24:40:e3:cc:d6:4c:3f:eb:30:69:e2:c6:af:50:50:
                    28:56:39:f7:80:8f:09:91:7f:88:f3:20:6e:99:6b:
                    a4:f4:95:46:d9:41:50:63:9a:54:89:50:b1:fc:fd:
                    40:bd:dd:0d:d4:16:52:be:93:cf:a3:30:14:f3:bf:
                    a3:6a:b2:61:4f:aa:92:f0:19:ac:ca:fe:1d:de:9f:
                    88:ad:17:18:dd:98:24:20:f9:87:01:db:c6:93:45:
                    87:ba:3c:b1:a0:4e:18:94:a1:58:b8:a9:64:0d:ba:
                    aa:03:74:f1:b1:ad:3d:98:e8:7c:1c:e6:1a:68:f3:
                    89:b7:b9:b5:04:ea:e0:22:46:5f:d1:78:7c:29:fa:
                    b0:b9:95:c5:38:e1:44:a8:1d:5c:17:0d:eb:5e:cd:
                    66:b3:a8:7d:6a:3c:88:16:6b:f1:ca:b9:e5:78:f7:
                    ea:b4:89:65:6b:77:46:1e:ad:34:95:6d:66:91:0d:
                    36:f1:73:0b:76:93:e8:e2:82:07:c0:cf:c0:75:82:
                    88:41:fc:f2:3f:7b:dc:f3:21:95:f4:27:8c:69:ad:
                    24:ba:94:65:fe:bd:06:51:e5:13:ef:22:fb:aa:ba:
                    de:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:71:E0:E9:D1:EC:07:1D:43:78:95:5C:58:1F:F6:7F:D6:E4:A3:64
            X509v3 Authority Key Identifier:
                keyid:AE:80:0E:DE:83:3B:86:C4:8C:E3:70:55:67:06:8E:B9:07:24:B0:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roAO3oM7hsSM43BVZwaOuQcksI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/vXHg6dHsBx1DeJVcWB_2f9bko2Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/476139-5661-4697-8b57-424aef67f776/1/roAO3oM7hsSM43BVZwaOuQcksI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201616

    Signature Algorithm: sha256WithRSAEncryption
         b0:55:f7:18:65:cc:2c:32:8b:eb:27:28:5c:be:05:3a:27:d2:
         09:21:e4:d3:09:69:c0:bc:04:01:da:9e:52:86:f4:9d:ca:e5:
         12:d3:a9:fc:24:b4:31:41:10:f3:72:fc:8b:92:c0:4f:f4:8e:
         a9:d0:68:4e:e7:02:0f:27:9a:77:3a:66:62:53:9d:b0:7b:41:
         3e:51:af:5b:44:01:be:51:e1:44:80:3a:be:06:8a:ad:19:8a:
         85:c4:93:72:73:f8:8a:a9:19:28:18:ae:cf:05:48:a3:4c:6f:
         20:d5:47:ae:c4:80:eb:61:25:03:de:9d:cb:0a:fb:b5:43:63:
         b7:3f:7a:ce:4c:a0:ec:bb:2d:4b:f6:d2:f5:80:b9:ae:d8:93:
         fe:9e:d4:d6:5e:6f:d6:7a:13:70:58:90:e2:12:4a:b1:eb:76:
         ae:2b:63:6e:f8:2f:b0:96:0d:00:62:4c:76:b5:b2:65:35:94:
         0f:27:73:77:a7:21:7b:77:b1:65:97:85:1a:47:9c:aa:72:a9:
         a4:6e:7b:10:55:63:10:75:59:da:ca:e6:54:5f:ea:70:25:dd:
         3f:d6:15:6e:5e:97:9a:df:6e:91:4b:be:00:4f:eb:7c:eb:d3:
         5a:fc:d2:5d:5d:53:f6:eb:c1:44:c3:c4:34:e9:57:b8:36:bf:
         bb:a4:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:25:05 2026 by rpki-client