Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/33OiyTAxbzcKSVhm3M6P_KKGUXA.asa
File: 33OiyTAxbzcKSVhm3M6P_KKGUXA.asa (raw, json)
Hash identifier: 2O4DUY7NbEpyHk+o21GW3wqR3b0JJe5CNAm8BcLP7wg=
Subject key identifier: DF:73:A2:C9:30:31:6F:37:0A:49:58:66:DC:CE:8F:FC:A2:86:51:70
Certificate issuer: /CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Certificate serial: 019E9D57617FC47006383A7BDEC6834B8556
Authority key identifier: B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/33OiyTAxbzcKSVhm3M6P_KKGUXA.asa
Signing time: Sat 06 Jun 2026 14:30:09 +0000
ASPA not before: Sat 06 Jun 2026 14:30:09 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 202118
Providers: AS: 7578
AS: 24198
AS: 47311
AS: 58389
AS: 133210
AS: 137409
Validation: Failed, certificate revoked on Wed 10 Jun 2026 17:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:57:61:7f:c4:70:06:38:3a:7b:de:c6:83:4b:85:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Validity
Not Before: Jun 6 14:30:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df73a2c930316f370a495866dcce8ffca2865170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:d2:c9:8e:ce:5d:c0:49:bc:e7:15:10:79:
ea:9e:83:3a:7e:62:f1:6b:2f:8b:42:41:4a:71:cf:
c9:ef:c9:19:d4:93:ab:5d:bb:98:32:08:ad:a0:c3:
b5:ba:6c:71:52:56:c4:0f:82:29:8b:f7:86:32:62:
f2:53:a9:11:4a:29:10:e7:eb:a9:47:72:f4:38:5f:
98:d1:b3:b3:fb:45:22:b5:6f:4f:45:2a:11:bf:04:
3e:42:4c:3b:26:a4:a0:2e:45:5b:77:89:f1:08:0f:
66:2c:51:83:41:b8:28:27:76:82:65:1f:46:ba:4d:
de:b0:94:c9:a8:0c:96:c5:73:53:e1:e4:89:e5:f0:
03:74:8b:23:49:92:b1:81:f0:fa:b9:97:c2:f0:79:
25:52:a9:0e:29:ed:a8:f8:75:38:78:58:92:ae:57:
a5:0e:02:6a:ca:3a:0b:da:df:bb:48:99:9f:23:31:
a4:23:32:14:9f:b1:d8:c5:42:5e:75:01:1f:77:3d:
39:e4:b2:8d:7d:e4:c7:5c:41:09:ca:6c:5e:33:7e:
10:12:f5:02:4d:ea:ec:dc:c8:08:97:d5:f2:94:1a:
69:85:60:60:c5:c0:03:9e:93:39:b4:37:a2:1f:80:
95:4a:a0:d6:dd:36:9f:cb:5f:51:be:d1:d4:5e:0f:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:73:A2:C9:30:31:6F:37:0A:49:58:66:DC:CE:8F:FC:A2:86:51:70
X509v3 Authority Key Identifier:
keyid:B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/33OiyTAxbzcKSVhm3M6P_KKGUXA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202118
Signature Algorithm: sha256WithRSAEncryption
81:67:3e:81:e8:10:e6:3d:39:99:71:a7:ff:4c:0b:a3:94:45:
a2:88:0f:04:ec:c0:09:48:04:10:02:7a:ab:ed:f9:3c:77:b5:
5d:46:e7:ff:9c:24:24:08:ee:fc:6c:f9:1f:45:5c:74:96:43:
2b:6b:61:fa:4a:62:fb:29:e5:df:17:da:c4:86:d4:4a:7b:25:
89:7c:3d:b7:c2:8c:4e:ee:3e:37:a6:65:29:2d:67:0a:20:52:
9d:17:47:79:70:1d:f7:88:a9:be:42:f1:a1:7c:6a:37:62:f6:
f8:22:47:bd:bb:bc:f4:de:d2:1c:52:f7:1e:bc:23:3a:d7:05:
37:bd:12:d6:3c:c1:3a:a0:93:8a:cd:ba:fc:09:87:78:93:dd:
14:dc:75:d6:e1:ce:cc:a3:48:3b:ba:4b:94:ea:94:5a:9e:45:
55:52:a4:70:c3:08:4a:80:d7:9b:32:2c:a9:81:ed:f3:ea:bf:
71:bd:63:90:55:17:fb:d6:f3:b4:0b:0f:ba:6c:4d:9e:07:44:
e8:b8:06:e9:49:fc:f3:41:13:41:f9:32:96:bc:80:85:bb:1d:
9b:65:e8:93:a3:28:47:87:f5:ce:e8:71:5a:f4:23:f3:a8:3f:
00:c9:44:a8:a7:30:40:b2:e6:1c:8c:84:39:11:4b:cc:39:85:
d6:9b:32:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 07:17:12 2026 by rpki-client