Autonomous System Provider Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/AS214757.asa
File: AS214757.asa (raw, json)
Hash identifier: bofgjpfgnGZClk8fivN3ntgMuj4/YJcdhOKAfl7ZNsI=
Subject key identifier: F5:DE:3D:36:17:B0:6B:D5:4F:9D:4E:49:7F:2D:70:40:CA:32:38:CD
Certificate issuer: /CN=2caba02127925d9988710eee5a0a59b004c6b6b1
Certificate serial: 04572432B9A8803EB0BDC59949362BE2E68DFB7A
Authority key identifier: 2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/AS214757.asa
Signing time: Sat 11 Jan 2025 20:21:19 +0000
ASPA not before: Sat 11 Jan 2025 20:16:19 +0000
ASPA not after: Sat 10 Jan 2026 20:21:19 +0000
Customer ASID: 214757
Providers: AS: 6939
AS: 64289
AS: 207841
AS: 209735
AS: 211301
AS: 214809
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:57:24:32:b9:a8:80:3e:b0:bd:c5:99:49:36:2b:e2:e6:8d:fb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2caba02127925d9988710eee5a0a59b004c6b6b1
Validity
Not Before: Jan 11 20:16:19 2025 GMT
Not After : Jan 10 20:21:19 2026 GMT
Subject: CN=F5DE3D3617B06BD54F9D4E497F2D7040CA3238CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:db:d8:48:76:37:54:89:b9:bf:b8:7a:5a:c6:
fd:ef:3d:11:85:da:b8:0c:63:20:be:45:22:7d:31:
d9:24:b2:41:f6:84:2a:8f:26:db:b4:22:f1:f1:2b:
1b:58:00:e9:a7:10:4b:69:ff:81:da:19:58:ff:a2:
05:56:29:d2:7b:5a:8e:65:f9:ba:cc:03:c2:76:47:
17:34:01:2a:cc:13:51:0c:51:37:d5:a1:f8:d2:9c:
a8:36:48:45:b8:f3:22:53:63:a5:68:f3:fd:26:83:
72:81:62:87:b0:26:d2:d6:f1:22:bc:0c:1b:bd:4a:
6d:e4:20:b2:ca:8a:10:f8:51:af:4f:42:d7:22:5f:
ad:4f:1b:71:4e:71:f4:30:2d:99:49:1d:b2:2d:36:
2e:dc:6e:0d:e7:9d:5c:83:e6:6b:57:e8:54:04:bb:
7d:ff:66:a6:07:db:05:d2:21:02:4c:33:a7:f9:7d:
a0:0f:81:ce:df:38:d4:ae:15:43:5c:a8:92:e3:ba:
2a:a6:44:59:8f:b9:70:86:77:6c:1d:61:e3:4e:dc:
de:9e:90:ad:f3:fa:15:5c:f0:9e:e5:18:ad:7c:1b:
83:f4:a8:ba:9b:19:65:a5:4e:fd:69:41:3c:d9:4e:
1f:4a:24:9d:1e:bc:ef:00:26:00:83:fc:5e:01:fc:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DE:3D:36:17:B0:6B:D5:4F:9D:4E:49:7F:2D:70:40:CA:32:38:CD
X509v3 Authority Key Identifier:
keyid:2C:AB:A0:21:27:92:5D:99:88:71:0E:EE:5A:0A:59:B0:04:C6:B6:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/2CABA02127925D9988710EEE5A0A59B004C6B6B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKugISeSXZmIcQ7uWgpZsATGtrE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02c72b7c-f55a-4990-ac8a-633ee1f8e8e1/0/AS214757.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214757
Signature Algorithm: sha256WithRSAEncryption
49:27:12:83:35:39:41:a6:b6:75:6e:1c:53:72:6c:da:a7:6b:
35:64:19:e8:02:2d:ae:97:da:bb:05:14:79:46:0f:6c:71:eb:
aa:8d:cf:b2:9e:8d:1c:3a:86:a2:38:1d:59:ba:99:be:31:70:
94:9c:63:a3:b8:3c:c7:1d:33:85:a2:7d:9e:3d:a4:8f:b3:e2:
eb:bd:cc:c4:de:2b:d7:88:c1:20:f1:9f:2b:46:c2:de:f3:65:
9f:4e:8d:46:ac:4c:90:e9:96:a8:92:95:f9:d2:37:c8:9c:79:
7f:05:23:a6:12:e6:56:4a:74:c9:6e:2e:06:52:50:f5:d2:02:
30:5c:b8:5b:63:58:2d:10:5c:a2:e5:93:58:16:36:5c:d8:88:
87:65:c1:8e:0a:1c:c0:b5:da:63:3b:0a:f0:2f:75:88:d4:73:
87:f3:7f:3a:e8:4a:7e:75:48:2a:5d:67:0c:53:f8:83:b1:f2:
0c:4b:87:f8:67:97:c2:35:8b:a0:35:f4:a9:12:2b:7f:21:c8:
d9:26:99:3d:d7:04:11:32:6b:40:ab:87:58:1d:29:5d:e9:4e:
49:51:7a:65:2e:23:e0:2e:b8:c6:73:50:03:93:54:94:73:f5:
b1:6f:b8:bf:41:69:ab:d8:20:85:c1:8c:ba:65:c2:a3:ac:f6:
5f:70:61:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:40 2025 by rpki-client