Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/P2Lt2UKs9mIKElI-GPRknTpc8CY.asa
File: P2Lt2UKs9mIKElI-GPRknTpc8CY.asa (raw, json)
Hash identifier: Y5PJvZUEZZwawQuYs5UG5ZhvZtOlPHXmvTLGPZfcG0U=
Subject key identifier: 3F:62:ED:D9:42:AC:F6:62:0A:12:52:3E:18:F4:64:9D:3A:5C:F0:26
Certificate issuer: /CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Certificate serial: 019DDD947CB8BC0B7DEAA4D63528BF87B009
Authority key identifier: B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/P2Lt2UKs9mIKElI-GPRknTpc8CY.asa
Signing time: Thu 30 Apr 2026 08:49:49 +0000
ASPA not before: Thu 30 Apr 2026 08:49:49 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 199243
Providers: AS: 6939
AS: 11967
AS: 34927
AS: 41051
AS: 52025
AS: 209735
AS: 212895
Validation: Failed, certificate revoked on Thu 30 Apr 2026 09:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:94:7c:b8:bc:0b:7d:ea:a4:d6:35:28:bf:87:b0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Validity
Not Before: Apr 30 08:49:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f62edd942acf6620a12523e18f4649d3a5cf026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:a0:77:12:b8:33:2f:ff:f1:8b:d2:e1:6b:
86:08:8d:29:82:af:9f:c8:e2:48:fe:57:13:53:93:
39:76:7c:80:3e:c3:d9:32:e5:b2:1e:c8:e5:29:8b:
fb:0e:fc:8a:dc:68:f8:ec:26:03:f6:ff:91:8f:77:
b2:a1:b6:00:fd:dd:17:3b:39:91:1b:51:b3:cb:db:
f2:99:70:1d:56:bf:38:50:7c:ff:2c:86:01:ea:ca:
97:7e:72:b0:2e:9d:ba:7d:87:5b:f4:53:41:d4:e0:
f9:89:e8:5a:3b:2c:09:d5:40:3d:02:64:01:62:cc:
f6:b9:64:38:1b:bb:58:2c:3f:90:4b:2d:af:61:a6:
8d:f4:bb:9d:4e:98:8b:2c:52:24:57:22:93:32:f9:
45:86:c9:36:e3:fc:58:4e:77:51:be:60:04:1f:df:
de:17:2d:0c:4f:95:47:8d:e6:25:12:90:06:df:20:
45:ee:b1:d8:f0:9a:5a:41:d4:14:4e:99:7c:08:cd:
b0:f8:29:14:3e:6e:86:a3:54:7e:c0:17:b2:2a:f4:
b7:18:7a:91:a3:6f:f8:39:71:b8:52:a8:9f:6c:29:
15:b2:32:48:fc:e3:71:c6:14:bf:ee:7f:47:4e:54:
7d:fa:61:31:c5:3d:54:7d:f5:66:37:93:f8:e7:3c:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:62:ED:D9:42:AC:F6:62:0A:12:52:3E:18:F4:64:9D:3A:5C:F0:26
X509v3 Authority Key Identifier:
keyid:B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/P2Lt2UKs9mIKElI-GPRknTpc8CY.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199243
Signature Algorithm: sha256WithRSAEncryption
98:55:20:39:81:2b:f2:a7:9d:2b:80:ea:a9:51:7e:69:5b:62:
e3:33:c6:eb:aa:91:33:c5:6a:99:1d:27:a1:b6:19:01:55:83:
2a:2f:ff:9b:a5:07:18:96:23:90:71:79:c7:f2:58:db:05:e3:
f4:c1:41:20:ac:12:18:71:f1:c1:f5:e1:5c:2c:ae:7d:70:60:
be:f8:60:27:11:05:6f:bb:f9:af:1e:59:66:2c:6f:5a:fc:f6:
65:60:03:18:80:ee:23:a4:d5:59:76:58:6c:f5:9c:aa:80:80:
ac:66:67:15:7e:91:17:ee:07:c3:c6:bd:80:fd:fd:0c:cb:dd:
68:38:ad:7c:9b:e5:d5:71:6f:08:2d:11:a2:46:b9:b0:c5:8a:
52:cf:bd:ea:f4:19:81:4a:f3:90:5e:eb:6e:97:67:89:b5:37:
54:35:bb:92:ec:44:95:13:36:e6:7a:7f:fe:f1:fd:3a:7a:18:
22:1a:70:35:b0:1a:39:c3:de:1a:7e:fc:3d:a3:b0:d1:c1:ad:
16:49:de:23:0e:5c:27:97:5a:2a:05:6b:cf:f5:a9:52:8e:61:
60:f9:96:df:50:96:2c:e1:d0:1c:5b:9d:23:de:df:60:72:a1:
8e:32:ac:c7:e0:f5:b3:66:3a:fe:f0:fd:34:84:ff:07:21:dd:
e4:32:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:05 2026 by rpki-client