Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/PjIz6sXi7Jr6QniRoUYrFjDXtMQ.asa
File:                     PjIz6sXi7Jr6QniRoUYrFjDXtMQ.asa (raw, json)
Hash identifier:          XI/crimW0+A+vRMvSFxs5WovAPPa7zxrBboj7F6gSRg=
Subject key identifier:   3E:32:33:EA:C5:E2:EC:9A:FA:42:78:91:A1:46:2B:16:30:D7:B4:C4
Certificate issuer:       /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial:       019CCD644672C34235B3F5B6E45C444802AD
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/PjIz6sXi7Jr6QniRoUYrFjDXtMQ.asa
Signing time:             Sun 08 Mar 2026 12:20:26 +0000
ASPA not before:          Sun 08 Mar 2026 12:20:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200625
Providers:                AS: 20473
                          AS: 212895
                          AS: 214677
                          AS: 215467
Validation:               Failed, certificate revoked on Mon 09 Mar 2026 13:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:cd:64:46:72:c3:42:35:b3:f5:b6:e4:5c:44:48:02:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
        Validity
            Not Before: Mar  8 12:20:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3e3233eac5e2ec9afa427891a1462b1630d7b4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:43:58:7b:04:dc:44:da:91:83:c2:6e:43:
                    72:e4:90:3b:dd:ce:9f:29:01:cb:aa:43:be:cf:3d:
                    d5:67:ca:a9:a4:d8:82:ed:1e:a7:ce:32:27:fe:16:
                    43:f8:16:a9:8d:25:93:ec:fa:94:fd:8f:00:0c:12:
                    c5:30:4d:dd:08:38:67:e6:44:e9:b5:c2:13:c7:43:
                    95:ef:a0:d6:89:e1:b2:3e:4a:cd:18:f1:35:15:31:
                    87:c8:c0:d2:49:f5:da:84:21:ac:81:9e:9e:d5:e9:
                    b1:03:82:c7:8e:00:db:22:e3:b6:ab:74:fc:e0:6c:
                    4e:ff:8d:e8:27:43:cd:76:5b:5e:ed:c5:4f:a9:57:
                    5c:79:cf:78:b6:e8:6b:79:aa:40:45:0a:dc:17:85:
                    35:dc:00:fd:18:73:e8:bb:3d:52:3e:36:a9:c0:21:
                    fb:12:82:b1:1b:1e:33:35:1b:80:e9:64:53:3a:2e:
                    4c:0d:86:7d:91:a2:c3:b0:81:11:74:7a:fc:90:04:
                    d5:2c:df:98:22:03:89:6c:f0:c2:c8:2e:67:af:27:
                    27:6c:73:97:5c:94:34:d1:13:00:94:3f:3c:08:b3:
                    d7:bd:c9:c6:62:92:83:65:b0:42:06:50:77:d7:bc:
                    d1:f7:11:e4:1c:cf:5a:76:4a:1f:21:7d:13:27:53:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:32:33:EA:C5:E2:EC:9A:FA:42:78:91:A1:46:2B:16:30:D7:B4:C4
            X509v3 Authority Key Identifier:
                keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/PjIz6sXi7Jr6QniRoUYrFjDXtMQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200625

    Signature Algorithm: sha256WithRSAEncryption
         5f:08:93:ba:57:94:7c:32:5f:9c:c4:21:93:4d:47:d1:18:67:
         19:5a:3f:03:7d:3d:05:e2:94:89:aa:2b:3c:de:95:55:bf:d4:
         7e:95:f1:9c:e9:2e:de:fb:96:f0:dc:17:95:98:38:74:95:e7:
         71:20:e7:80:24:f4:73:63:0c:cc:e8:6e:49:ff:7f:ab:2e:ca:
         eb:a5:ee:87:4f:ce:70:ad:af:36:1f:57:ac:2f:d4:71:82:31:
         26:a9:e1:ef:ce:70:c7:56:65:86:8b:ba:9a:8f:4f:d3:7a:70:
         3b:00:7d:a6:c6:04:39:c2:4a:12:05:f9:1d:87:ff:10:12:08:
         64:f2:28:4a:02:02:a4:ae:78:93:7b:1b:af:8a:a2:80:51:34:
         0a:50:17:f6:99:29:0d:7f:f2:55:6c:48:13:6f:cc:79:e8:92:
         cb:7a:56:c9:e0:5c:ad:95:39:91:39:53:ce:9e:1d:70:a3:16:
         b3:b9:60:18:40:d0:a0:15:06:75:5c:41:fe:25:82:44:d4:a8:
         29:ba:f2:55:5d:69:f8:aa:a1:18:5b:fd:ac:a1:21:44:c7:2a:
         81:c3:02:8b:fd:e2:b4:ed:04:45:cd:8b:b2:76:61:34:76:64:
         64:80:5f:21:f5:35:f6:eb:3c:3b:d3:5e:95:8d:aa:7d:b1:91:
         56:c6:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 22:21:49 2026 by rpki-client