Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/vR30SegYFEVCcEtxhllmNw4NYEk.asa
File:                     vR30SegYFEVCcEtxhllmNw4NYEk.asa (raw, json)
Hash identifier:          5C6CEWUWpvECy8+4buFWU/tQ74Ok3V2c6UlCsMBwN9A=
Subject key identifier:   BD:1D:F4:49:E8:18:14:45:42:70:4B:71:86:59:66:37:0E:0D:60:49
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       019B399560E0870FC66D2703EFA1565231EB
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/vR30SegYFEVCcEtxhllmNw4NYEk.asa
Signing time:             Sat 20 Dec 2025 02:27:29 +0000
ASPA not before:          Sat 20 Dec 2025 02:27:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            200455
Providers:                AS: 3204
                          AS: 6939
                          AS: 41051
                          AS: 142064
                          AS: 212271
                          AS: 212895
                          AS: 400304
Validation:               Failed, certificate revoked on Thu 22 Jan 2026 07:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:39:95:60:e0:87:0f:c6:6d:27:03:ef:a1:56:52:31:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Dec 20 02:27:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bd1df449e818144542704b71865966370e0d6049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:f2:07:94:39:05:2b:14:0e:54:78:87:d8:
                    c8:1c:7b:9d:08:35:f5:7e:72:0a:c1:19:79:c4:34:
                    e9:b1:a8:09:84:6e:c3:5b:fc:c0:cf:70:d6:df:3e:
                    6d:2d:d9:19:d8:69:9a:99:3d:ee:f9:f5:85:4d:7c:
                    ca:9f:cc:db:2f:14:36:ba:86:b8:f7:99:10:e1:99:
                    ea:74:8a:00:a2:15:6b:3b:4c:f1:fe:ae:d0:52:46:
                    91:90:44:d8:4d:5f:b0:5a:18:87:e7:a9:c7:d3:3d:
                    87:42:15:1c:d9:13:00:5d:fa:6c:14:c3:4b:dd:f3:
                    05:3b:d7:6f:e0:65:9d:e8:c5:e1:cd:92:01:99:e5:
                    79:af:e5:40:0b:8d:7b:dd:a9:9d:2c:86:5a:ef:27:
                    f3:ad:21:5e:66:69:67:aa:c2:c5:13:5a:68:a2:5a:
                    c3:d2:5e:ec:aa:40:1b:4f:a4:8e:a7:13:9e:5a:76:
                    5c:d6:97:4b:2d:93:e5:a5:08:aa:f0:77:48:30:ad:
                    b5:d1:f1:50:d3:a9:f2:23:06:eb:66:12:8e:86:b5:
                    08:ae:13:60:df:21:8c:40:60:52:f0:86:36:90:0d:
                    19:c4:9d:db:ba:3e:32:5e:ef:76:70:8f:45:39:85:
                    2d:3a:01:95:24:8a:a6:e3:a6:02:07:bf:6c:b2:04:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1D:F4:49:E8:18:14:45:42:70:4B:71:86:59:66:37:0E:0D:60:49
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/vR30SegYFEVCcEtxhllmNw4NYEk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200455

    Signature Algorithm: sha256WithRSAEncryption
         2a:d7:b3:63:80:eb:2f:cd:0d:c6:d2:bc:c3:4e:aa:e0:a4:ee:
         2d:12:4b:40:da:69:13:f5:10:54:ed:f5:24:42:cc:4c:10:b4:
         72:17:56:ac:e1:2d:0d:7f:7a:53:0c:58:63:c0:09:b5:c3:44:
         4f:e6:a3:b0:0c:e8:d8:a1:5c:19:32:9f:e2:f2:02:7e:64:bd:
         67:2c:69:db:9f:38:c4:80:53:95:c0:28:72:cb:46:a0:9f:0c:
         ab:b2:14:3f:14:6e:77:80:df:6e:3e:4f:31:9a:00:d5:bb:77:
         14:5a:a0:fd:41:8d:ad:19:58:6d:f2:32:a7:54:99:93:ec:e9:
         a1:70:1d:32:c6:0f:e5:4b:be:8f:41:83:34:2c:22:99:48:38:
         5e:f5:8b:5b:76:ae:cb:42:ef:fd:24:05:a3:93:26:00:b7:b2:
         e6:13:62:ce:92:af:60:ae:50:79:9f:ea:77:68:4e:82:d3:e1:
         1a:30:00:f8:f3:36:6d:34:e4:af:8a:2d:86:21:4b:45:65:09:
         6e:9b:10:fa:1d:75:07:11:93:a7:24:5a:f4:49:b4:4b:f9:8d:
         cc:f8:ee:ec:4c:2a:2f:a4:2c:c9:eb:9c:cb:6f:5c:42:b4:d2:
         97:34:85:c1:42:b3:bd:34:06:5b:68:28:26:f0:a8:98:a4:c1:
         f8:71:1e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:36:59 2026 by rpki-client