Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/cTPQfYdwZgWGBA9mJkfDkueEmqM.asa
File: cTPQfYdwZgWGBA9mJkfDkueEmqM.asa (raw, json)
Hash identifier: k2p724VLCBcWya9jnEjFtCnWTQOcLrNfv5wSdpKXFJc=
Subject key identifier: 71:33:D0:7D:87:70:66:05:86:04:0F:66:26:47:C3:92:E7:84:9A:A3
Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial: 019B80B18A3239ADF8F6723CBFDE80EA6B86
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/cTPQfYdwZgWGBA9mJkfDkueEmqM.asa
Signing time: Fri 02 Jan 2026 21:51:17 +0000
ASPA not before: Fri 02 Jan 2026 21:51:17 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 208437
Providers: AS: 6939
AS: 9002
AS: 41720
Validation: Failed, certificate revoked on Mon 12 Jan 2026 15:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:80:b1:8a:32:39:ad:f8:f6:72:3c:bf:de:80:ea:6b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Validity
Not Before: Jan 2 21:51:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7133d07d8770660586040f662647c392e7849aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:db:94:79:1f:0e:6f:b7:49:70:e0:34:50:
01:97:a0:cd:ad:ac:df:97:4c:77:7b:f4:3d:df:cf:
15:f2:aa:dc:3a:f9:96:21:66:5f:c2:39:e9:f8:ba:
c8:8d:8c:e1:92:4b:8f:fd:77:29:68:03:dc:28:20:
97:6c:4b:77:49:72:c2:8f:2d:9b:49:79:fb:6a:c9:
b8:4e:37:56:1b:75:be:a8:3d:a0:ad:7d:91:d7:77:
8f:05:47:0a:bd:e9:80:62:f3:fa:1d:40:d9:d5:d5:
3e:92:62:a0:dd:54:1f:26:83:48:d2:75:94:8a:c2:
2b:8f:3c:14:af:9a:62:3d:40:3b:e7:a8:5d:4a:82:
a4:eb:3c:ce:eb:33:35:72:fa:de:02:84:0d:08:6c:
f1:ca:0d:60:89:0b:7f:78:d8:dc:7d:75:a9:6e:9f:
48:0d:bd:0c:b7:56:a6:c8:37:77:4b:cf:ad:ca:71:
3b:aa:70:30:46:eb:eb:ef:86:82:d0:ce:c8:9f:1a:
d5:49:6c:7e:cb:e5:2c:e8:33:3b:1a:3c:44:fd:4f:
f3:c5:5d:fb:8d:42:9d:4c:6a:d5:8f:38:7b:85:a5:
4d:fb:f0:af:50:1e:4c:5a:c5:98:41:d4:e2:4b:92:
74:5c:4a:86:b0:7b:1c:f3:e4:3f:8a:75:99:e7:00:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:33:D0:7D:87:70:66:05:86:04:0F:66:26:47:C3:92:E7:84:9A:A3
X509v3 Authority Key Identifier:
keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/cTPQfYdwZgWGBA9mJkfDkueEmqM.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208437
Signature Algorithm: sha256WithRSAEncryption
4c:9d:b9:ec:c8:ca:a8:c8:fe:dd:5a:14:44:ce:b9:7f:94:92:
d9:a5:09:47:ba:18:60:f6:f2:18:58:18:54:64:ec:9f:06:d2:
eb:f2:bc:ce:e5:98:ae:24:e3:71:26:b4:fa:1e:a7:81:26:da:
0f:b7:ea:25:d0:6c:b8:74:67:f2:85:75:2d:64:86:5a:ae:e2:
6b:c9:f6:72:13:9b:48:d9:74:4b:0a:2e:58:08:1e:84:9a:5f:
a9:47:14:bd:b6:08:aa:16:0a:45:01:39:a3:af:70:15:da:97:
8b:3e:bd:b4:08:1c:ec:02:f7:27:44:fb:6f:bc:8f:88:d1:18:
8f:b7:bb:5c:b7:6a:f2:7c:9b:ef:06:f8:7a:9b:10:5f:a2:c2:
0d:95:5f:1c:60:8b:e9:b3:40:c3:0d:44:33:63:17:df:a3:52:
6a:82:2f:4e:a7:4d:29:99:38:fa:03:fb:79:89:3e:a9:33:ab:
d5:ed:c8:15:23:d1:11:5b:56:d5:22:a9:69:b9:38:91:ee:ca:
f7:84:eb:a3:3b:75:95:1c:64:d6:9e:3d:aa:08:d3:93:ad:f3:
c1:a4:37:43:68:d3:13:7b:1f:75:8d:23:f7:64:d7:48:34:26:
17:db:c9:db:a5:15:8b:e9:ea:6f:82:ee:25:bb:f4:84:7f:b4:
1c:b9:79:b0
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZuAsYoyOa349nI8v96A6muGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYWM1MGIzNGIyYmFmZGM0NmRjNWI3NWQzOWJjMGRkODlh
NjhmMmMwHhcNMjYwMTAyMjE1MTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTMzZDA3ZDg3NzA2NjA1ODYwNDBmNjYyNjQ3YzM5MmU3ODQ5YWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3vblHkfDm+3SXDgNFABl6DNrazf
l0x3e/Q9388V8qrcOvmWIWZfwjnp+LrIjYzhkkuP/XcpaAPcKCCXbEt3SXLCjy2b
SXn7asm4TjdWG3W+qD2grX2R13ePBUcKvemAYvP6HUDZ1dU+kmKg3VQfJoNI0nWU
isIrjzwUr5piPUA756hdSoKk6zzO6zM1cvreAoQNCGzxyg1giQt/eNjcfXWpbp9I
Db0Mt1amyDd3S8+tynE7qnAwRuvr74aC0M7InxrVSWx+y+Us6DM7GjxE/U/zxV37
jUKdTGrVjzh7haVN+/CvUB5MWsWYQdTiS5J0XEqGsHsc8+Q/inWZ5wC8FwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFHEz0H2HcGYFhgQPZiZHw5LnhJqjMB8GA1UdIwQY
MBaAFF6sULNLK6/cRtxbddObwN2Jpo8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYt
NzA1OGYxMWZhYzgyLzEvY1RQUWZZZHdaZ1dHQkE5bUprZkRrdWVFbXFNLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYtNzA1OGYxMWZhYzgy
LzEvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMuNTANBgkqhkiG
9w0BAQsFAAOCAQEATJ257MjKqMj+3VoURM65f5SS2aUJR7oYYPbyGFgYVGTsnwbS
6/K8zuWYriTjcSa0+h6ngSbaD7fqJdBsuHRn8oV1LWSGWq7ia8n2chObSNl0Swou
WAgehJpfqUcUvbYIqhYKRQE5o69wFdqXiz69tAgc7AL3J0T7b7yPiNEYj7e7XLdq
8nyb7wb4epsQX6LCDZVfHGCL6bNAww1EM2MX36NSaoIvTqdNKZk4+gP7eYk+qTOr
1e3IFSPREVtW1SKpabk4ke7K94Trozt1lRxk1p49qgjTk63zwaQ3Q2jTE3sfdY0j
92TXSDQmF9vJ26UVi+nqb4LuJbv0hH+0HLl5sA==
-----END CERTIFICATE-----
Generated at Fri Mar 20 03:43:26 2026 by rpki-client