Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/qB87NrhaOH3TrdbMNy_8V7sXtmo.asa
File: qB87NrhaOH3TrdbMNy_8V7sXtmo.asa (raw, json)
Hash identifier: XVn5HG2UwXulAeWCpJzQuLa01dmpjz+8LFFO66acz88=
Subject key identifier: A8:1F:3B:36:B8:5A:38:7D:D3:AD:D6:CC:37:2F:FC:57:BB:17:B6:6A
Certificate issuer: /CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Certificate serial: 019CBEF3608360169FD6F9AFEDE2E9982F66
Authority key identifier: 80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/qB87NrhaOH3TrdbMNy_8V7sXtmo.asa
Signing time: Thu 05 Mar 2026 17:02:26 +0000
ASPA not before: Thu 05 Mar 2026 17:02:26 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 206604
Providers: AS: 8772
AS: 20473
AS: 29632
AS: 201269
AS: 201279
AS: 203534
AS: 212895
Validation: Failed, certificate revoked on Wed 11 Mar 2026 10:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:f3:60:83:60:16:9f:d6:f9:af:ed:e2:e9:98:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8038929cc8d8fc00d96976be4c8c1ed7daf455d7
Validity
Not Before: Mar 5 17:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a81f3b36b85a387dd3add6cc372ffc57bb17b66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:95:78:4b:e2:6b:dc:b9:ae:22:03:0e:05:
f6:18:c7:e6:e3:ec:53:ec:39:9e:5c:bf:dc:f5:b4:
70:08:46:82:e4:76:95:74:5a:98:8b:4a:d5:ab:4f:
04:c2:59:14:2e:b4:34:f0:de:d4:2e:64:02:8f:2c:
71:f3:e8:f2:b9:02:06:cb:eb:03:6c:14:43:c7:41:
fa:be:48:7d:f1:52:fa:17:83:e6:3c:13:64:93:d4:
c9:e3:d2:84:84:64:c4:13:14:c0:11:8d:4d:c6:34:
4b:a6:93:59:8d:5d:5e:56:43:f3:05:77:fa:44:f2:
22:b3:d7:f2:94:e7:8e:ee:dd:53:f9:4b:51:f8:d3:
99:c4:ac:f6:56:13:eb:11:16:9c:c7:80:c9:3e:99:
28:ed:b0:07:aa:49:cd:02:5e:2a:79:1b:96:ed:2f:
31:04:d6:77:50:a7:78:ce:6a:c9:82:39:d9:b9:66:
2c:29:ca:af:ed:f3:c4:91:e3:b7:0c:6f:a6:ea:fe:
84:97:51:8f:16:f3:61:2d:62:8c:75:fc:83:53:b0:
ea:4e:ce:13:89:59:a6:c6:e5:44:c4:73:3f:d5:b6:
fc:5d:4f:52:97:ec:64:86:aa:b4:77:81:70:62:82:
b3:0f:36:3b:36:da:00:3a:7e:e8:7b:5e:03:29:9b:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1F:3B:36:B8:5A:38:7D:D3:AD:D6:CC:37:2F:FC:57:BB:17:B6:6A
X509v3 Authority Key Identifier:
keyid:80:38:92:9C:C8:D8:FC:00:D9:69:76:BE:4C:8C:1E:D7:DA:F4:55:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDiSnMjY_ADZaXa-TIwe19r0Vdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/qB87NrhaOH3TrdbMNy_8V7sXtmo.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/3daa6b-6348-48b2-8b96-51afb0d8d163/1/gDiSnMjY_ADZaXa-TIwe19r0Vdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206604
Signature Algorithm: sha256WithRSAEncryption
5c:91:45:9e:ff:ae:0d:5c:76:47:a3:97:c7:b3:93:d5:87:d7:
91:c3:2e:2b:a2:f4:f2:51:02:a0:75:59:29:d6:96:73:ff:f8:
e2:d9:76:30:a6:a8:94:b8:0a:33:dc:39:20:a9:c0:d5:d2:f5:
1d:f9:65:e2:1e:9c:97:5d:60:4c:76:07:05:e8:ca:9c:59:25:
12:c8:fc:6d:3d:2a:d5:7e:d0:8e:75:f6:41:54:63:37:76:09:
8d:e8:01:4f:a7:d1:c1:92:55:89:1c:01:92:4e:22:a8:31:79:
fe:0b:74:e9:7f:75:a5:75:f3:e3:24:7d:a6:ce:c5:07:07:70:
3f:1d:fe:b6:a8:88:3e:cf:4a:37:21:83:50:3d:39:8d:04:42:
79:0a:44:63:27:e8:07:1b:15:1b:d6:bc:6d:8d:1e:39:79:82:
20:36:8e:04:8c:03:a0:88:c9:20:d9:09:05:40:11:a9:96:44:
8b:fd:a0:53:06:43:12:a6:01:5c:8e:37:f0:45:60:e6:85:3e:
bb:c8:08:12:6c:50:39:67:b2:f1:c8:a9:f5:5c:d8:a9:28:f8:
4f:0a:f8:2f:f4:16:21:81:9a:aa:5d:6d:4f:ee:bc:61:d7:9e:
49:03:60:a7:00:97:7d:1d:94:77:85:02:45:d7:03:e5:8d:95:
29:4a:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 22:21:52 2026 by rpki-client