Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/hg-QeOqoNAIenE0Okx8zUJ3Db2k.asa
File: hg-QeOqoNAIenE0Okx8zUJ3Db2k.asa (raw, json)
Hash identifier: 7KZiYOaT6S9JrG7NnPeJobuFey8QZGPIpJl4yDxsQbo=
Subject key identifier: 86:0F:90:78:EA:A8:34:02:1E:9C:4D:0E:93:1F:33:50:9D:C3:6F:69
Certificate issuer: /CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
Certificate serial: 019B74E18DE2DBF994F0AE4DDF6AEF501567
Authority key identifier: 00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/hg-QeOqoNAIenE0Okx8zUJ3Db2k.asa
Signing time: Wed 31 Dec 2025 14:48:17 +0000
ASPA not before: Wed 31 Dec 2025 14:48:17 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 212234
Providers: AS: 50338
AS: 208790
Validation: Failed, certificate revoked on Mon 12 Jan 2026 16:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:74:e1:8d:e2:db:f9:94:f0:ae:4d:df:6a:ef:50:15:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
Validity
Not Before: Dec 31 14:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=860f9078eaa834021e9c4d0e931f33509dc36f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3d:dd:cb:36:a1:08:b3:d4:10:fb:7e:ed:64:
6e:64:07:97:8a:c2:d3:bb:e2:e2:b4:35:a0:75:b0:
05:2a:9a:5f:ba:e2:c3:0e:40:c6:33:3e:18:58:72:
c4:ff:c1:81:25:82:d4:8b:2f:61:83:86:e2:3e:60:
e2:c8:16:56:1b:fd:f7:22:32:2a:71:fd:f8:be:3c:
41:45:c2:05:f2:e1:66:97:cc:d7:c3:b5:9e:be:67:
05:79:1c:7e:9c:e5:29:a2:62:c9:7f:fb:e6:8a:36:
f8:59:a8:4e:72:f4:10:a6:3a:7e:89:da:87:f1:6b:
01:e6:21:aa:bf:d3:11:88:9b:79:c1:49:f1:96:8c:
07:8c:8b:10:3e:6f:2d:47:df:14:81:9d:03:fb:d2:
4f:1d:b4:3f:1f:54:a0:64:73:0d:dc:8b:c0:06:8a:
af:0d:c8:66:6c:52:c4:63:62:69:63:25:cd:13:ec:
65:5d:73:86:cc:db:85:6d:66:12:a4:16:65:21:01:
5d:83:f8:01:64:57:e7:74:90:da:a7:90:79:10:10:
81:d3:76:89:a0:d8:46:66:c9:f2:1c:2a:b2:c2:c6:
e0:07:49:d0:51:a8:76:9a:18:18:41:da:75:27:48:
8d:c4:5c:ba:21:81:f3:56:7a:f7:67:d6:d8:c2:84:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0F:90:78:EA:A8:34:02:1E:9C:4D:0E:93:1F:33:50:9D:C3:6F:69
X509v3 Authority Key Identifier:
keyid:00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/hg-QeOqoNAIenE0Okx8zUJ3Db2k.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212234
Signature Algorithm: sha256WithRSAEncryption
b4:3c:9e:0e:c3:07:8b:50:95:c9:6f:ed:5f:e6:08:c7:e0:67:
4c:ba:a2:e3:5e:ad:ac:ac:c1:61:b7:6a:59:21:4e:38:b3:6a:
8f:a1:13:f9:88:07:94:c2:39:23:b4:67:9e:ca:78:36:b8:bb:
25:4e:f1:9f:03:48:cb:2e:c4:cf:1a:12:86:4c:af:05:18:d5:
c0:55:46:2a:cb:34:f2:00:34:aa:d8:4c:bd:8c:3b:fa:47:62:
43:cb:ec:ae:20:dd:d1:23:e3:a4:a2:01:16:0c:02:44:b2:28:
64:d6:f7:cb:56:67:cb:ea:5b:45:05:ad:ec:ed:72:0b:ca:fb:
21:4d:bb:e1:60:2b:4e:ab:d8:49:04:5a:a0:91:b5:99:22:6b:
84:26:63:05:d4:e0:a1:6b:45:71:6d:f3:c9:d4:05:aa:9e:7b:
08:d4:69:db:87:cf:7e:d6:4d:9f:5b:91:4c:ba:4d:ba:44:0a:
27:e0:70:8a:5c:ae:bb:e8:7f:13:09:9b:7b:ff:70:2c:c9:a1:
72:15:ea:5b:34:6c:05:1a:a2:7a:0d:f2:be:77:ef:29:b8:c3:
ed:95:2f:56:9c:c9:66:37:9a:2b:cc:40:75:87:b4:9f:40:6a:
8c:d9:06:41:88:0a:f5:41:03:1e:10:db:10:55:23:19:5e:d7:
0b:95:e6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:01:18 2026 by rpki-client