Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/b0eOlbzKyaNhWwNE35xf3fYkvhs.asa
File: b0eOlbzKyaNhWwNE35xf3fYkvhs.asa (raw, json)
Hash identifier: GeVoYY/5lgFPNlgRrOnNwr85GWbXcEhZPhsWsZgVzyA=
Subject key identifier: 6F:47:8E:95:BC:CA:C9:A3:61:5B:03:44:DF:9C:5F:DD:F6:24:BE:1B
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019B5CC0ADA09B3DC3DC85C4C3868335D048
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/b0eOlbzKyaNhWwNE35xf3fYkvhs.asa
Signing time: Fri 26 Dec 2025 22:21:29 +0000
ASPA not before: Fri 26 Dec 2025 22:21:29 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 211358
Providers: AS: 6517
AS: 6939
AS: 8772
AS: 16276
AS: 29632
AS: 33387
AS: 34927
AS: 41051
AS: 52025
AS: 152565
AS: 207841
AS: 209735
AS: 211288
AS: 212895
AS: 215638
AS: 215828
AS: 216324
Validation: Failed, certificate revoked on Sun 25 Jan 2026 13:15:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5c:c0:ad:a0:9b:3d:c3:dc:85:c4:c3:86:83:35:d0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Dec 26 22:21:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f478e95bccac9a3615b0344df9c5fddf624be1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:a8:e3:1a:99:f7:94:81:e3:99:62:3e:d7:
42:68:5f:02:b1:f6:bc:7c:eb:4f:ad:37:5e:a4:c6:
f9:7f:eb:5f:5a:a2:86:10:6b:e5:ad:91:ac:99:21:
c0:95:9b:e6:55:86:62:73:8f:4a:87:69:88:8f:fa:
11:ce:80:ce:bd:70:35:be:62:38:76:70:77:c8:5e:
bc:80:b2:bb:cb:dd:d9:99:57:e8:53:34:1a:2e:ec:
8a:87:cb:34:e5:66:ff:d1:7c:76:88:b8:06:21:4e:
82:39:9f:4b:ef:8f:27:df:13:e5:a3:2d:b6:47:f7:
8a:4e:52:f6:64:83:3c:3a:80:56:ac:25:c9:82:00:
a9:66:34:a3:d7:18:2a:6f:50:c8:38:15:22:cf:f2:
c1:a2:5c:76:b4:51:5c:61:da:6a:e8:8f:d5:57:ed:
2d:0d:f2:a6:a8:c5:3e:48:88:34:d2:60:34:59:b4:
57:a0:85:26:ad:b4:fc:33:4f:bc:cb:5a:b4:ed:19:
61:41:8e:3d:0b:22:d9:e2:63:fe:82:8c:43:94:b1:
e0:53:6e:66:a6:27:24:ec:45:f4:1d:0f:4e:9b:4c:
e3:91:2b:a9:dc:65:6b:bd:48:8a:f8:14:30:92:d0:
fc:f6:28:92:59:e4:34:c5:ba:35:d6:9d:f5:24:a9:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:47:8E:95:BC:CA:C9:A3:61:5B:03:44:DF:9C:5F:DD:F6:24:BE:1B
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/b0eOlbzKyaNhWwNE35xf3fYkvhs.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211358
Signature Algorithm: sha256WithRSAEncryption
88:06:78:62:9f:81:07:52:33:c2:9a:67:60:62:87:1b:9d:8f:
be:b2:fa:45:50:1f:3c:c0:fa:96:c9:40:97:ce:9e:89:b4:4e:
83:be:dc:fc:c8:4c:e1:5d:e1:ae:6d:85:8c:ff:02:76:44:4d:
a0:da:c8:53:8b:83:06:bc:33:f2:0d:4b:1e:21:1a:98:41:0a:
1e:2e:47:1e:37:e3:d3:84:13:49:d9:b2:26:77:b8:d3:28:15:
45:3c:c0:dd:a0:df:3f:95:5b:2a:c7:dc:d4:1b:e6:74:aa:78:
f4:f2:ec:af:b3:e7:ea:1b:ec:3e:fd:80:68:1a:e6:25:5d:ae:
c4:d9:c6:b9:c0:b8:db:4d:f1:c1:08:e2:12:93:3d:32:bd:8a:
50:0d:21:83:13:53:95:d5:98:62:96:ac:b0:ec:83:94:f9:f2:
e7:67:8e:e4:de:c4:09:30:4d:d4:55:c4:61:7e:fa:0c:13:33:
d8:96:be:a7:68:c8:b0:0e:8d:a4:e0:22:4f:42:98:1d:e0:06:
20:54:a2:93:43:d9:63:4e:89:f0:f9:6f:28:31:d3:19:2b:ca:
fc:e1:19:69:94:3f:98:83:db:ef:0b:39:0e:42:82:41:80:d3:
f3:ca:db:63:af:15:af:b5:b3:c1:cf:bc:1b:45:24:8e:ac:41:
d7:8f:15:64
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZtcwK2gmz3D3IXEw4aDNdBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NmRhYTZmODUwNDE0YTEzZjY1MGRmMDk0NTA2NjI4YTQ2
ZGMxMmYwHhcNMjUxMjI2MjIyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjQ3OGU5NWJjY2FjOWEzNjE1YjAzNDRkZjljNWZkZGY2MjRiZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Go4xqZ95SB45liPtdCaF8Csfa8
fOtPrTdepMb5f+tfWqKGEGvlrZGsmSHAlZvmVYZic49Kh2mIj/oRzoDOvXA1vmI4
dnB3yF68gLK7y93ZmVfoUzQaLuyKh8s05Wb/0Xx2iLgGIU6COZ9L748n3xPloy22
R/eKTlL2ZIM8OoBWrCXJggCpZjSj1xgqb1DIOBUiz/LBolx2tFFcYdpq6I/VV+0t
DfKmqMU+SIg00mA0WbRXoIUmrbT8M0+8y1q07RlhQY49CyLZ4mP+goxDlLHgU25m
pick7EX0HQ9Om0zjkSup3GVrvUiK+BQwktD89iiSWeQ0xbo11p31JKnAXwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFG9HjpW8ysmjYVsDRN+cX932JL4bMB8GA1UdIwQY
MBaAFLVtqm+FBBShP2UN8JRQZiikbcEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFcycWI0VUVGS0VfWlEzd2xGQm1LS1J0d1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmVlMDEtMWZiOC00N2UyLWI3NjYt
ZmUwYTJhYzA4NjlmLzEvYjBlT2xiekt5YU5oV3dORTM1eGYzZllrdmhzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zYmVlMDEtMWZiOC00N2UyLWI3NjYtZmUwYTJhYzA4Njlm
LzEvdFcycWI0VUVGS0VfWlEzd2xGQm1LS1J0d1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM5njANBgkqhkiG
9w0BAQsFAAOCAQEAiAZ4Yp+BB1IzwppnYGKHG52PvrL6RVAfPMD6lslAl86eibRO
g77c/MhM4V3hrm2FjP8CdkRNoNrIU4uDBrwz8g1LHiEamEEKHi5HHjfj04QTSdmy
Jne40ygVRTzA3aDfP5VbKsfc1BvmdKp49PLsr7Pn6hvsPv2AaBrmJV2uxNnGucC4
203xwQjiEpM9Mr2KUA0hgxNTldWYYpassOyDlPny52eO5N7ECTBN1FXEYX76DBMz
2Ja+p2jIsA6NpOAiT0KYHeAGIFSik0PZY06J8PlvKDHTGSvK/OEZaZQ/mIPb7ws5
DkKCQYDT88rbY68Vr7Wzwc+8G0UkjqxB148VZA==
-----END CERTIFICATE-----
Generated at Wed Mar 11 03:09:56 2026 by rpki-client