Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/0ZTKxXNo0sxLHRhukON5IXYt6kA.asa
File: 0ZTKxXNo0sxLHRhukON5IXYt6kA.asa (raw, json)
Hash identifier: p/YtnSXxcaXTfTor486rpYKhAp8RgPHTxjCHcotmjA0=
Subject key identifier: D1:94:CA:C5:73:68:D2:CC:4B:1D:18:6E:90:E3:79:21:76:2D:EA:40
Certificate issuer: /CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Certificate serial: 019F891D6AAE1C13DDDD954B8F5EDBD2E64F
Authority key identifier: 8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/0ZTKxXNo0sxLHRhukON5IXYt6kA.asa
Signing time: Wed 22 Jul 2026 09:17:14 +0000
ASPA not before: Wed 22 Jul 2026 09:17:14 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 219421
Providers: AS: 31898
AS: 47272
AS: 209533
AS: 212895
Validation: Failed, certificate revoked on Fri 24 Jul 2026 06:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:1d:6a:ae:1c:13:dd:dd:95:4b:8f:5e:db:d2:e6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Validity
Not Before: Jul 22 09:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d194cac57368d2cc4b1d186e90e37921762dea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:0e:57:7b:dd:8b:5d:ca:c3:0e:86:c5:10:
c8:20:5f:29:39:29:be:01:2c:35:f9:69:a7:b6:e6:
ce:55:30:f1:25:93:ec:b3:4a:b1:8d:16:a2:29:db:
ec:49:e6:33:aa:4e:f5:3e:04:72:12:a8:9b:8b:7c:
82:54:a2:6f:32:ca:03:0a:80:92:fc:8c:aa:5e:ab:
47:ad:9c:55:9e:ac:14:36:d1:2f:7e:5b:d1:cd:3a:
4f:aa:3d:c1:4c:1a:1e:56:2f:5c:c2:a0:b8:b9:bf:
ed:27:e6:c7:7c:c0:8f:e7:1b:f5:8f:08:9c:7c:94:
b7:15:df:f1:b2:29:89:6c:76:70:27:b8:cd:3f:42:
c0:62:d3:2a:8b:41:fb:58:c7:6a:b6:1b:6f:46:74:
2e:59:1e:e4:84:fa:4c:3e:55:ca:f2:5a:d7:4c:12:
45:d4:de:b0:b9:ce:d1:6d:29:4f:a0:0e:20:c1:3d:
cb:9f:b8:19:b0:ca:89:96:35:e4:50:28:ff:09:5b:
fd:c2:df:8d:52:ff:97:12:1b:55:76:6d:d8:31:95:
5f:9a:fd:a7:da:05:53:90:e5:7e:26:df:f1:a4:f2:
6d:51:63:48:bc:13:d0:56:28:41:18:0e:dd:ab:50:
e1:97:be:ca:60:52:a1:f7:99:4e:20:13:93:6f:d3:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:94:CA:C5:73:68:D2:CC:4B:1D:18:6E:90:E3:79:21:76:2D:EA:40
X509v3 Authority Key Identifier:
keyid:8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/0ZTKxXNo0sxLHRhukON5IXYt6kA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219421
Signature Algorithm: sha256WithRSAEncryption
8a:83:b8:07:2f:89:13:ff:f1:9a:8d:cc:6f:19:db:7c:a4:d2:
78:f7:99:54:1e:80:b9:49:c2:79:9c:57:42:f9:a1:41:83:63:
32:45:3b:50:8d:2d:6a:9a:1e:37:53:b4:6c:e7:fb:33:97:0c:
02:34:66:d2:9f:87:57:b8:51:54:b1:71:fd:18:b1:44:09:2d:
73:42:60:2e:df:cb:a4:26:33:04:25:e2:9b:17:b8:98:aa:e2:
09:d5:31:c8:f8:de:2f:6e:0d:4e:56:c3:f1:52:62:88:a3:c1:
9f:fa:7f:91:f0:83:d6:ed:a9:27:ed:55:ef:a3:33:89:95:ac:
b7:9d:bf:20:79:92:b1:93:c2:cb:5f:14:88:f4:c0:88:eb:79:
44:1f:f6:36:ac:95:91:c2:97:4c:b2:c6:d8:fa:d5:fa:bd:4c:
86:55:69:16:bb:71:5f:15:61:ff:ab:72:3b:64:25:df:ae:0f:
2e:41:20:1f:ef:f1:ee:3c:06:69:d5:44:f9:b7:a4:1a:53:37:
d0:88:94:13:aa:db:6e:06:76:75:c3:9a:49:68:20:bc:4b:07:
4e:72:d1:1e:0a:86:6e:a2:54:e7:43:f0:74:ac:b8:db:20:d4:
c3:30:27:3d:ba:ce:4a:da:04:d7:c2:4e:62:f5:a3:4c:57:71:
1c:6d:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:49 2026 by rpki-client