Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/3kTe_Kd0jwU7xRoanDF7yNyI4Tk.asa
File: 3kTe_Kd0jwU7xRoanDF7yNyI4Tk.asa (raw, json)
Hash identifier: 1JmgENYy2rCqruNmNUJW1sL/1ehmttEdRo3z720c21E=
Subject key identifier: DE:44:DE:FC:A7:74:8F:05:3B:C5:1A:1A:9C:31:7B:C8:DC:88:E1:39
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 019CBEE02670879C623048A04870CCCC5285
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/3kTe_Kd0jwU7xRoanDF7yNyI4Tk.asa
Signing time: Thu 05 Mar 2026 16:41:26 +0000
ASPA not before: Thu 05 Mar 2026 16:41:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 204033
Providers: AS: 58057
Validation: Failed, certificate revoked on Mon 09 Mar 2026 18:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:e0:26:70:87:9c:62:30:48:a0:48:70:cc:cc:52:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Mar 5 16:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de44defca7748f053bc51a1a9c317bc8dc88e139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:a2:ba:9f:75:3b:88:d5:e0:98:f3:16:97:
f8:5c:02:88:74:af:0c:9f:f5:4e:bd:43:55:d6:41:
4a:72:52:ce:49:4f:bd:2c:95:0a:b1:50:95:f0:d5:
f4:c7:c9:fe:06:5b:5b:e7:18:21:f0:29:b0:8b:17:
54:49:8e:b8:34:6f:d7:8f:b3:a4:d5:b1:ff:64:d9:
32:d6:2a:69:75:03:2b:18:ef:e4:43:7f:77:60:f5:
26:1c:a0:41:c7:44:b2:12:99:5e:92:d5:f9:c8:1c:
99:91:9d:7d:50:11:41:09:67:8a:bb:7b:cc:6c:db:
99:a0:e2:3a:0b:2c:32:ad:db:3e:e6:13:06:2c:5c:
29:e8:3d:9e:40:6c:39:03:81:36:29:30:f9:10:4b:
fb:cc:33:61:51:8a:12:14:92:1f:90:b5:6f:9b:0c:
a7:db:ec:97:c7:6a:38:6d:9b:6b:ca:31:e1:d6:d9:
8f:05:af:c3:6e:7c:2a:39:ba:59:53:5d:f5:04:f2:
4a:f7:50:c0:74:4f:f9:24:fc:67:c0:e8:79:a5:29:
fc:d5:1d:19:2a:1b:a6:33:ca:6f:4e:78:9f:74:eb:
89:d6:ee:1e:93:3b:47:cf:b4:45:12:1b:9d:b1:6f:
78:96:32:bb:fc:c3:ac:6c:84:62:5d:70:c2:e7:0a:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:44:DE:FC:A7:74:8F:05:3B:C5:1A:1A:9C:31:7B:C8:DC:88:E1:39
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/3kTe_Kd0jwU7xRoanDF7yNyI4Tk.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204033
Signature Algorithm: sha256WithRSAEncryption
2f:e0:dd:72:62:c5:54:a7:ce:95:56:02:e9:31:c2:6a:e9:cc:
43:04:58:98:8d:dc:1b:9a:6f:fe:4d:63:f1:d5:9a:e6:36:26:
17:b3:1a:7a:f1:93:2d:dd:a1:b5:24:cb:19:12:52:4e:3c:a3:
40:ac:c6:df:30:95:db:ec:fe:d9:a9:e4:b6:80:e0:de:0b:d5:
20:0b:93:e1:8a:2f:aa:9e:1a:8c:44:61:ae:da:07:b9:d7:07:
a5:ec:e6:cc:c6:88:bf:fd:88:cb:58:bd:4d:fa:33:d6:b0:d4:
4a:f4:d4:22:8d:a7:6e:f0:53:38:61:85:dc:c3:52:3a:20:a6:
d3:7f:68:2a:79:af:cf:e3:de:4e:44:a4:9a:6d:4f:34:37:e2:
ec:b0:af:bc:05:91:c4:2b:e4:8b:5c:b9:0f:03:33:51:1f:54:
c0:a9:95:17:b2:47:27:2d:88:ed:60:9b:cd:1c:d3:2a:e8:d5:
cd:e4:3b:28:52:46:a2:8d:14:b4:fc:af:31:16:91:d7:d6:3d:
a5:15:f8:8d:58:04:17:b8:c5:5a:da:0f:b7:79:bf:7f:6e:97:
23:0b:3b:78:7c:48:5b:c8:b5:27:ef:96:e0:80:d5:70:48:46:
b3:ef:4d:6e:f5:12:2b:a0:25:fe:f3:ca:65:e4:ad:1a:c4:58:
8e:df:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 22:21:50 2026 by rpki-client