Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/VBYrjvdUPmg5xOi7uVAa9DJpo30.asa
File:                     VBYrjvdUPmg5xOi7uVAa9DJpo30.asa (raw, json)
Hash identifier:          vhwZnXzL9Th7bDy7piZpvEvkZSvMVWmOzEkbOXUiQ4I=
Subject key identifier:   54:16:2B:8E:F7:54:3E:68:39:C4:E8:BB:B9:50:1A:F4:32:69:A3:7D
Certificate issuer:       /CN=647664ba5773614a3c44f90c12ae725548a75cd4
Certificate serial:       019BDC8413865A810DE4F13640B1949524E9
Authority key identifier: 64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/VBYrjvdUPmg5xOi7uVAa9DJpo30.asa
Signing time:             Tue 20 Jan 2026 17:46:41 +0000
ASPA not before:          Tue 20 Jan 2026 17:46:41 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213449
Providers:                AS: 6204
                          AS: 6939
                          AS: 11967
                          AS: 34927
                          AS: 47536
                          AS: 58087
                          AS: 142064
                          AS: 203446
Validation:               Failed, certificate revoked on Sat 24 Jan 2026 22:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:dc:84:13:86:5a:81:0d:e4:f1:36:40:b1:94:95:24:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647664ba5773614a3c44f90c12ae725548a75cd4
        Validity
            Not Before: Jan 20 17:46:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=54162b8ef7543e6839c4e8bbb9501af43269a37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7d:01:75:ee:16:56:38:f7:52:61:73:f8:12:
                    eb:85:50:6f:11:d1:d2:00:d6:27:47:bf:fb:87:a5:
                    0d:39:35:a2:e2:e2:c5:14:d0:d0:2c:bb:a4:87:ba:
                    34:f2:78:84:72:08:5d:fb:73:3e:f8:03:70:49:00:
                    c3:c3:8a:b0:24:4d:7f:07:fb:31:18:a2:2a:e8:c0:
                    be:6c:9f:29:0c:7d:2a:6f:32:9d:39:fd:c2:1a:50:
                    aa:63:f2:0c:d1:34:d8:f5:17:1c:6f:20:cb:39:15:
                    92:39:04:62:5f:f5:04:5d:53:0c:f2:2e:28:34:0d:
                    8a:29:90:f2:99:9e:f9:eb:94:c5:b1:65:12:13:f0:
                    da:b7:e5:3f:ec:ac:fd:00:62:23:df:13:86:fd:a4:
                    31:a8:1d:5b:e1:0c:be:42:9c:8f:e9:15:00:67:9e:
                    d0:65:8a:9b:ad:0f:13:6d:c1:e3:8c:6d:d5:fc:ca:
                    d4:57:9a:b2:51:f2:b9:24:3d:71:c2:7a:8f:83:84:
                    53:89:dc:d9:59:51:d1:27:93:76:bd:4a:27:3e:2b:
                    67:a5:c3:d7:80:41:fb:52:1b:fc:3c:61:da:f0:ca:
                    1e:3d:a7:b9:cf:76:f2:ff:7f:97:e5:34:33:90:fa:
                    91:88:58:31:97:fb:93:b4:57:bd:95:cc:72:1d:8b:
                    ce:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:16:2B:8E:F7:54:3E:68:39:C4:E8:BB:B9:50:1A:F4:32:69:A3:7D
            X509v3 Authority Key Identifier:
                keyid:64:76:64:BA:57:73:61:4A:3C:44:F9:0C:12:AE:72:55:48:A7:5C:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHZkuldzYUo8RPkMEq5yVUinXNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/VBYrjvdUPmg5xOi7uVAa9DJpo30.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c1a46a-a79d-4595-bb39-e291a52a9d15/1/ZHZkuldzYUo8RPkMEq5yVUinXNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213449

    Signature Algorithm: sha256WithRSAEncryption
         3e:04:fd:4f:bf:18:e9:ff:66:19:bf:41:ce:f9:45:3e:df:4a:
         dc:92:3d:9d:16:38:66:db:a0:7b:2f:78:11:be:b2:1e:7b:c3:
         22:2b:37:22:7f:a3:7e:16:8d:01:8e:32:42:57:79:f8:ff:ee:
         61:c6:ea:d5:95:0c:b8:16:3d:75:c2:19:a2:7e:d8:91:1f:74:
         23:73:b1:52:77:1b:67:76:c9:88:60:f4:cf:91:88:9f:81:ec:
         1c:0c:06:00:30:8c:d3:8b:06:d7:13:71:70:6b:52:6d:71:2e:
         cd:67:35:ff:42:db:bc:e6:21:61:f6:61:38:0e:b8:20:b6:0e:
         ac:bd:59:a8:44:cc:be:bb:fa:90:30:95:eb:a2:46:25:b0:d7:
         b9:f4:b6:b9:6a:f6:da:5b:ff:ab:2d:b7:8d:fd:33:a8:11:4c:
         ee:17:bf:a2:ac:d9:07:58:32:eb:f4:7b:ce:82:c3:7a:60:7b:
         6c:18:9c:ba:13:79:20:9f:6e:ed:39:01:fb:90:b6:b2:4d:b1:
         5c:8c:c7:67:5b:c8:af:2a:a3:88:78:2c:26:81:22:e9:c3:f3:
         e4:3e:fc:ca:f8:e6:d9:d5:bb:4c:00:3d:fd:50:78:d1:1d:e5:
         cf:84:fe:99:dc:af:89:03:52:b8:3a:e5:b8:dc:02:fd:c8:c7:
         dd:be:e1:ce
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZvchBOGWoEN5PE2QLGUlSTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzY2NGJhNTc3MzYxNGEzYzQ0ZjkwYzEyYWU3MjU1NDhh
NzVjZDQwHhcNMjYwMTIwMTc0NjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDE2MmI4ZWY3NTQzZTY4MzljNGU4YmJiOTUwMWFmNDMyNjlhMzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X0Bde4WVjj3UmFz+BLrhVBvEdHS
ANYnR7/7h6UNOTWi4uLFFNDQLLukh7o08niEcghd+3M++ANwSQDDw4qwJE1/B/sx
GKIq6MC+bJ8pDH0qbzKdOf3CGlCqY/IM0TTY9RccbyDLORWSOQRiX/UEXVMM8i4o
NA2KKZDymZ7565TFsWUSE/Dat+U/7Kz9AGIj3xOG/aQxqB1b4Qy+QpyP6RUAZ57Q
ZYqbrQ8TbcHjjG3V/MrUV5qyUfK5JD1xwnqPg4RTidzZWVHRJ5N2vUonPitnpcPX
gEH7Uhv8PGHa8MoePae5z3by/3+X5TQzkPqRiFgxl/uTtFe9lcxyHYvOwQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFFQWK473VD5oOcTou7lQGvQyaaN9MB8GA1UdIwQY
MBaAFGR2ZLpXc2FKPET5DBKuclVIp1zUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzkt
ZTI5MWE1MmE5ZDE1LzEvVkJZcmp2ZFVQbWc1eE9pN3VWQWE5REpwbzMwLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9jMWE0NmEtYTc5ZC00NTk1LWJiMzktZTI5MWE1MmE5ZDE1
LzEvWkhaa3VsZHpZVW84UlBrTUVxNXlWVWluWE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNByTANBgkqhkiG
9w0BAQsFAAOCAQEAPgT9T78Y6f9mGb9BzvlFPt9K3JI9nRY4Ztugey94Eb6yHnvD
Iis3In+jfhaNAY4yQld5+P/uYcbq1ZUMuBY9dcIZon7YkR90I3OxUncbZ3bJiGD0
z5GIn4HsHAwGADCM04sG1xNxcGtSbXEuzWc1/0LbvOYhYfZhOA64ILYOrL1ZqETM
vrv6kDCV66JGJbDXufS2uWr22lv/qy23jf0zqBFM7he/oqzZB1gy6/R7zoLDemB7
bBicuhN5IJ9u7TkB+5C2sk2xXIzHZ1vIryqjiHgsJoEi6cPz5D78yvjm2dW7TAA9
/VB40R3lz4T+mdyviQNSuDrluNwC/cjH3b7hzg==
-----END CERTIFICATE-----
Generated at Fri Apr 3 07:41:30 2026 by rpki-client