Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/JLUhby2yTluIzfgutM7IOpP0thQ.asa
File:                     JLUhby2yTluIzfgutM7IOpP0thQ.asa (raw, json)
Hash identifier:          2X1kWmJgLro3B3EW8sYEHZFWIksrB86Qq9r7FnJ87SY=
Subject key identifier:   24:B5:21:6F:2D:B2:4E:5B:88:CD:F8:2E:B4:CE:C8:3A:93:F4:B6:14
Certificate issuer:       /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial:       019C29A5481923FD495FB4A4BC95E7E32D2A
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/JLUhby2yTluIzfgutM7IOpP0thQ.asa
Signing time:             Wed 04 Feb 2026 17:13:43 +0000
ASPA not before:          Wed 04 Feb 2026 17:13:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211008
Providers:                AS: 31898
                          AS: 34927
                          AS: 41051
                          AS: 44324
Validation:               Failed, certificate revoked on Sun 22 Feb 2026 18:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:29:a5:48:19:23:fd:49:5f:b4:a4:bc:95:e7:e3:2d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
        Validity
            Not Before: Feb  4 17:13:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24b5216f2db24e5b88cdf82eb4cec83a93f4b614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f8:40:b8:c8:b5:51:db:36:46:45:25:3f:bd:
                    15:ea:c9:2f:2e:76:65:b3:53:00:59:43:9f:90:36:
                    f2:67:f1:f4:d7:b5:13:d0:64:92:f9:e2:01:37:42:
                    af:76:f9:02:09:bb:88:82:01:ef:48:7d:69:fe:a6:
                    f1:fd:52:6a:9f:7e:0b:c0:18:86:dc:5d:72:18:04:
                    ee:61:cc:ea:5c:f4:9e:da:36:4d:04:a7:d1:3f:08:
                    75:35:52:d7:cc:36:03:a8:8a:75:9d:88:4d:78:8f:
                    92:bf:ea:cb:c9:ac:51:97:34:d3:5c:a8:3c:0f:0c:
                    02:23:da:a2:59:76:72:9f:d5:95:84:96:ac:8f:f1:
                    10:e2:5f:9f:9b:49:03:bf:79:71:cd:5b:36:82:3b:
                    a8:f4:4d:74:d5:19:98:2d:d4:97:bf:47:f3:57:47:
                    49:0e:7b:d0:60:d9:e2:80:88:f9:97:24:44:4a:09:
                    dd:46:7b:22:55:8d:f9:8d:f3:47:32:6a:fb:6b:a5:
                    87:dc:3d:74:04:cf:70:09:d3:1d:0c:95:32:c3:f6:
                    d3:bb:c2:46:74:8b:6f:b8:72:dd:bb:3a:15:20:d3:
                    44:f3:dc:01:5c:61:78:15:04:af:83:9a:17:3a:b1:
                    e9:a3:35:2d:3a:f6:f6:14:18:8e:ec:d6:3d:f7:a6:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B5:21:6F:2D:B2:4E:5B:88:CD:F8:2E:B4:CE:C8:3A:93:F4:B6:14
            X509v3 Authority Key Identifier:
                keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/JLUhby2yTluIzfgutM7IOpP0thQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211008

    Signature Algorithm: sha256WithRSAEncryption
         30:03:f7:79:45:11:e3:05:98:a9:ca:1f:8d:73:10:25:4c:99:
         97:72:5a:0f:04:3b:32:c2:1a:c9:f0:34:a4:14:f0:86:f6:16:
         fe:33:47:7b:d8:40:f3:f6:0f:39:cd:f8:3f:74:77:23:59:c0:
         db:76:ae:2b:83:16:1b:c7:b7:72:24:7c:48:b2:cd:0a:f3:c9:
         75:5e:e6:3e:cc:65:32:46:39:5f:44:60:11:51:2e:50:98:5f:
         89:ad:6c:3c:64:42:f8:83:50:ea:b6:ff:b8:e1:5f:98:be:6d:
         b1:59:f9:e8:8e:06:c0:30:1b:3d:1d:c3:b2:fa:f3:8f:d8:3f:
         f0:16:ec:1c:b6:13:52:b5:6a:e0:a9:09:f5:78:d6:00:08:e1:
         1a:1e:bd:ed:83:49:42:a8:fb:77:23:44:8d:70:1d:ce:29:76:
         9e:56:0d:57:2d:d0:ed:3a:ed:d4:92:f6:cc:80:1c:60:cf:1d:
         44:07:50:0a:17:3b:84:b8:d1:27:44:45:0c:c6:44:83:d0:eb:
         96:0a:ac:ec:ae:44:e5:45:37:80:d0:d8:51:ea:55:d5:5d:2e:
         95:69:7d:e7:27:db:77:d4:37:0b:10:17:b0:51:cd:c4:5b:4b:
         b8:31:45:70:f1:b5:ec:11:d0:b4:77:e2:49:ea:2c:e0:f5:35:
         5a:b4:86:be
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZwppUgZI/1JX7SkvJXn4y0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTRhNmViZGIzODNlMTE5ZDY5NTNjNzdmMTY4NjZlNzNl
ZjJkYjUwHhcNMjYwMjA0MTcxMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGI1MjE2ZjJkYjI0ZTViODhjZGY4MmViNGNlYzgzYTkzZjRiNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PhAuMi1Uds2RkUlP70V6skvLnZl
s1MAWUOfkDbyZ/H017UT0GSS+eIBN0KvdvkCCbuIggHvSH1p/qbx/VJqn34LwBiG
3F1yGATuYczqXPSe2jZNBKfRPwh1NVLXzDYDqIp1nYhNeI+Sv+rLyaxRlzTTXKg8
DwwCI9qiWXZyn9WVhJasj/EQ4l+fm0kDv3lxzVs2gjuo9E101RmYLdSXv0fzV0dJ
DnvQYNnigIj5lyRESgndRnsiVY35jfNHMmr7a6WH3D10BM9wCdMdDJUyw/bTu8JG
dItvuHLduzoVINNE89wBXGF4FQSvg5oXOrHpozUtOvb2FBiO7NY996Zw1QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCS1IW8tsk5biM34LrTOyDqT9LYUMB8GA1UdIwQY
MBaAFLqkpuvbOD4RnWlTx38Whm5z7y21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2Et
ODM5YWQ3ZDA5M2VkLzEvSkxVaGJ5MnlUbHVJemZndXRNN0lPcFAwdGhRLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2EtODM5YWQ3ZDA5M2Vk
LzEvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM4QDANBgkqhkiG
9w0BAQsFAAOCAQEAMAP3eUUR4wWYqcofjXMQJUyZl3JaDwQ7MsIayfA0pBTwhvYW
/jNHe9hA8/YPOc34P3R3I1nA23auK4MWG8e3ciR8SLLNCvPJdV7mPsxlMkY5X0Rg
EVEuUJhfia1sPGRC+INQ6rb/uOFfmL5tsVn56I4GwDAbPR3Dsvrzj9g/8BbsHLYT
UrVq4KkJ9XjWAAjhGh697YNJQqj7dyNEjXAdzil2nlYNVy3Q7Trt1JL2zIAcYM8d
RAdQChc7hLjRJ0RFDMZEg9Drlgqs7K5E5UU3gNDYUepV1V0ulWl95yfbd9Q3CxAX
sFHNxFtLuDFFcPG17BHQtHfiSeos4PU1WrSGvg==
-----END CERTIFICATE-----
Generated at Sat Mar 14 01:21:27 2026 by rpki-client