Autonomous System Provider Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/325436-9ea0-45dd-a12c-f500d04a6e1b/1/kxrtUbcZmbSPjX1555bbisVO8vI.asa
File: kxrtUbcZmbSPjX1555bbisVO8vI.asa (raw, json)
Hash identifier: TDQcXpeNBu8nvY+9PXGHawQ661yCCcYWpd4UHmhui/U=
Subject key identifier: 93:1A:ED:51:B7:19:99:B4:8F:8D:7D:79:E7:96:DB:8A:C5:4E:F2:F2
Certificate issuer: /CN=05a1a23babc82c5834264d5c7bcfe5a23f2cb257
Certificate serial: 01A18BF33A94466E85141CC6D81DBACE4A3C
Authority key identifier: 05:A1:A2:3B:AB:C8:2C:58:34:26:4D:5C:7B:CF:E5:A2:3F:2C:B2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaGiO6vILFg0Jk1ce8_loj8sslc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/325436-9ea0-45dd-a12c-f500d04a6e1b/1/kxrtUbcZmbSPjX1555bbisVO8vI.asa
Signing time: Fri 30 Oct 2026 08:35:35 +0000
ASPA not before: Fri 30 Oct 2026 08:35:35 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 218928
Providers: AS: 34872
AS: 208210
AS: 210233
AS: 212895
Validation: Failed, certificate revoked on Sat 14 Nov 2026 15:06:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:f3:3a:94:46:6e:85:14:1c:c6:d8:1d:ba:ce:4a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a1a23babc82c5834264d5c7bcfe5a23f2cb257
Validity
Not Before: Oct 30 08:35:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=931aed51b71999b48f8d7d79e796db8ac54ef2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:c5:e6:1a:b1:b3:75:35:f6:21:98:d3:54:
97:dc:c1:27:52:4f:4b:8e:30:a5:c2:a1:6f:cb:e9:
a9:fb:d7:40:a0:bb:fb:a3:c4:54:51:47:1e:8b:b3:
3d:b6:e2:06:d5:27:17:10:54:e7:0f:3f:11:84:70:
76:8b:de:99:81:b0:8b:ad:1c:b9:eb:8f:fb:c4:38:
90:81:e0:7b:1b:ac:45:96:b0:21:bc:1a:0a:3e:d0:
60:5a:55:31:a7:c3:d5:dd:44:56:cb:9d:b7:e2:0f:
cf:8e:0f:07:86:45:0b:5f:b9:a7:45:88:53:93:fb:
f2:92:9e:61:85:c2:4b:1f:a2:8b:16:6a:f1:60:1f:
54:f6:d0:0b:68:52:95:91:af:1e:c2:9b:6b:f1:95:
ce:47:c0:3d:fa:cc:2a:8e:05:b4:0c:76:ac:0a:07:
36:4f:9d:35:7d:ff:e4:54:45:18:54:0a:2f:2c:54:
1c:a0:cb:47:ba:06:33:2c:fa:03:54:3c:d8:a0:8c:
27:79:a2:c8:2a:46:c8:6a:36:cf:46:87:20:f0:88:
1c:35:ab:8b:e4:8f:6d:da:8e:f0:4e:93:62:7b:de:
6e:61:34:16:f1:7c:f8:7f:06:19:12:77:7d:80:44:
2a:85:ea:f5:78:af:41:db:ab:c6:6d:f4:7f:84:73:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1A:ED:51:B7:19:99:B4:8F:8D:7D:79:E7:96:DB:8A:C5:4E:F2:F2
X509v3 Authority Key Identifier:
keyid:05:A1:A2:3B:AB:C8:2C:58:34:26:4D:5C:7B:CF:E5:A2:3F:2C:B2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaGiO6vILFg0Jk1ce8_loj8sslc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/325436-9ea0-45dd-a12c-f500d04a6e1b/1/kxrtUbcZmbSPjX1555bbisVO8vI.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/325436-9ea0-45dd-a12c-f500d04a6e1b/1/BaGiO6vILFg0Jk1ce8_loj8sslc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218928
Signature Algorithm: sha256WithRSAEncryption
7d:2c:6d:7d:bb:5b:31:d0:11:18:f4:8d:bb:fb:de:97:3a:7e:
98:7e:a0:03:29:cf:b7:67:41:3e:3a:1c:f5:8a:b7:31:75:bf:
05:f1:f8:27:75:10:57:39:9a:96:78:be:57:95:44:b2:6d:38:
3a:fa:19:55:4b:1d:64:32:e0:60:e6:70:a5:dc:87:64:ec:4b:
c5:73:f2:39:12:12:a7:a8:86:d1:98:07:a0:17:3e:f9:b7:5c:
0b:03:fd:ce:f9:fd:f0:40:41:aa:13:2a:f3:11:10:db:72:29:
e2:48:9c:f3:30:fe:fe:0c:16:45:62:bd:20:37:29:34:e9:35:
dc:e9:da:91:76:5e:64:f9:89:05:a7:f2:f7:89:dc:cc:00:ed:
d5:91:57:b9:c9:e9:bf:b3:fe:17:cf:24:0a:5c:9a:e1:18:82:
00:b1:69:54:8a:6e:ec:8d:31:13:1a:a8:87:5a:6c:4d:cc:e0:
a1:06:26:41:d2:8c:d2:62:93:e6:18:bf:b0:1f:2d:e1:b9:ad:
d0:d9:73:b9:05:ab:5c:12:5e:82:5d:8f:2b:59:7a:23:19:d0:
a2:07:b6:cd:c8:5d:6e:a1:db:0f:48:b4:3e:ee:9d:ad:55:4d:
4f:e8:8d:2d:52:72:28:a8:c8:ba:5f:02:64:b4:ec:5d:43:c3:
7b:6a:a8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:36 2026 by rpki-client