Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/zTiuuwfLFAdfGQwWodnQmxXrVUo.asa
File:                     zTiuuwfLFAdfGQwWodnQmxXrVUo.asa (raw, json)
Hash identifier:          1qW40iHY1UKyGHTb/UUJM3/8nfvEF2wv5pfUrGXi86o=
Subject key identifier:   CD:38:AE:BB:07:CB:14:07:5F:19:0C:16:A1:D9:D0:9B:15:EB:55:4A
Certificate issuer:       /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial:       019CA71E4D8EB1B1A2EA33803291C9506EB4
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/zTiuuwfLFAdfGQwWodnQmxXrVUo.asa
Signing time:             Sun 01 Mar 2026 01:58:26 +0000
ASPA not before:          Sun 01 Mar 2026 01:58:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204464
Providers:                AS: 11967
                          AS: 24381
                          AS: 34800
                          AS: 34927
                          AS: 44393
                          AS: 49581
                          AS: 56755
                          AS: 58057
                          AS: 62403
                          AS: 205305
                          AS: 212232
                          AS: 212895
                          AS: 213409
                          AS: 213413
                          AS: 213449
                          AS: 214420
                          AS: 215569
                          AS: 215828
                          AS: 393577
                          AS: 400212
                          AS: 401753
Validation:               Failed, certificate revoked on Sun 01 Mar 2026 10:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a7:1e:4d:8e:b1:b1:a2:ea:33:80:32:91:c9:50:6e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
        Validity
            Not Before: Mar  1 01:58:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cd38aebb07cb14075f190c16a1d9d09b15eb554a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:43:4e:8e:4a:e6:c8:7b:d4:1f:22:7f:64:2f:
                    24:56:93:12:af:69:a0:26:1e:8e:1d:a1:ad:3d:88:
                    af:80:40:3d:ce:fc:bc:f3:af:0e:40:52:b6:5e:fc:
                    cd:ee:24:cd:ef:40:bd:da:c9:54:22:72:5b:c8:ed:
                    05:18:af:6a:99:44:03:0c:9c:43:de:08:f7:01:77:
                    9e:90:68:52:05:cd:23:5e:69:65:dc:d3:40:03:85:
                    63:9a:45:ef:bf:31:14:8b:82:d6:cc:0f:47:60:ee:
                    a3:50:49:e6:61:f5:fd:c4:90:74:f3:45:9d:5a:6d:
                    71:d4:34:46:bb:f1:6e:0c:7d:20:9f:d1:d4:70:f5:
                    01:18:64:4d:d9:e5:67:c4:be:7e:c2:04:b0:e5:29:
                    74:f9:aa:6e:4f:a6:00:b8:92:19:48:53:93:8e:0c:
                    3d:50:80:93:6e:9b:0d:e8:60:a6:6e:25:6d:a6:37:
                    d5:c9:01:00:c0:e9:fc:ef:6e:b2:26:ae:4b:1f:b9:
                    02:e7:9d:2c:d1:05:e0:e5:67:d5:87:fa:47:48:7b:
                    0a:18:c5:9d:f2:d5:75:e6:07:e4:58:25:71:de:eb:
                    77:f2:d8:bf:13:d6:53:54:b4:b7:9d:68:09:38:db:
                    9a:fc:ec:aa:14:97:e1:2c:4c:31:2a:c7:d5:0a:bd:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:38:AE:BB:07:CB:14:07:5F:19:0C:16:A1:D9:D0:9B:15:EB:55:4A
            X509v3 Authority Key Identifier:
                keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/zTiuuwfLFAdfGQwWodnQmxXrVUo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204464

    Signature Algorithm: sha256WithRSAEncryption
         80:a4:d8:c2:0c:e9:78:8f:5f:36:53:cd:52:f1:19:41:aa:ef:
         a5:24:36:12:e8:e5:c8:c9:ce:93:d7:26:43:4b:24:56:e3:df:
         0c:71:84:31:bb:4d:f2:bd:12:01:25:84:37:24:d2:9f:fb:79:
         9f:80:3d:29:d9:80:30:47:85:bd:ad:33:7a:60:96:1c:fa:ea:
         e2:51:21:33:c5:8a:ff:57:dc:35:08:ef:17:e2:49:46:4f:cc:
         dc:b3:07:bb:9f:bf:cc:d8:7c:4e:30:28:ca:03:ea:1d:fe:c8:
         ad:54:7d:4b:c3:8f:9c:39:98:4d:05:25:ec:ae:0c:fb:71:1b:
         1d:7e:0d:c7:aa:58:31:c8:80:f1:6e:ee:2e:fa:b1:f3:ed:9f:
         0d:37:b6:cd:d1:2e:b6:b1:cf:22:3a:34:de:35:30:92:b0:bc:
         12:86:46:8c:4a:d2:b7:9d:c1:90:f0:81:d2:37:f9:7f:0d:14:
         c4:34:ef:86:41:0d:28:ef:c4:cf:2b:85:01:dc:19:56:93:2b:
         98:e8:d1:85:a7:cd:77:4a:03:0e:a1:d5:57:4c:b2:bf:2f:de:
         1c:44:82:5f:40:87:96:46:9d:6a:64:fd:03:19:f3:b0:cf:15:
         ec:be:6e:21:0c:24:fa:9b:ba:7a:32:0a:67:f3:dc:eb:8d:2f:
         b1:14:7d:54
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZynHk2OsbGi6jOAMpHJUG60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDQwNTRkMWI2MjE1OGI4MzM1YTIwMTlmMDU0OGIzODcy
YTM0NDMwHhcNMjYwMzAxMDE1ODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDM4YWViYjA3Y2IxNDA3NWYxOTBjMTZhMWQ5ZDA5YjE1ZWI1NTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzENOjkrmyHvUHyJ/ZC8kVpMSr2mg
Jh6OHaGtPYivgEA9zvy8868OQFK2XvzN7iTN70C92slUInJbyO0FGK9qmUQDDJxD
3gj3AXeekGhSBc0jXmll3NNAA4VjmkXvvzEUi4LWzA9HYO6jUEnmYfX9xJB080Wd
Wm1x1DRGu/FuDH0gn9HUcPUBGGRN2eVnxL5+wgSw5Sl0+apuT6YAuJIZSFOTjgw9
UICTbpsN6GCmbiVtpjfVyQEAwOn8726yJq5LH7kC550s0QXg5WfVh/pHSHsKGMWd
8tV15gfkWCVx3ut38ti/E9ZTVLS3nWgJONua/OyqFJfhLEwxKsfVCr1CjQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFM04rrsHyxQHXxkMFqHZ0JsV61VKMB8GA1UdIwQY
MBaAFGTUBU0bYhWLgzWiAZ8FSLOHKjRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUt
NmI0ODUyNTcwYjhhLzEvelRpdXV3ZkxGQWRmR1F3V29kblFteFhyVlVvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUtNmI0ODUyNTcwYjhh
LzEvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMesDANBgkqhkiG
9w0BAQsFAAOCAQEAgKTYwgzpeI9fNlPNUvEZQarvpSQ2EujlyMnOk9cmQ0skVuPf
DHGEMbtN8r0SASWENyTSn/t5n4A9KdmAMEeFva0zemCWHPrq4lEhM8WK/1fcNQjv
F+JJRk/M3LMHu5+/zNh8TjAoygPqHf7IrVR9S8OPnDmYTQUl7K4M+3EbHX4Nx6pY
MciA8W7uLvqx8+2fDTe2zdEutrHPIjo03jUwkrC8EoZGjErSt53BkPCB0jf5fw0U
xDTvhkENKO/EzyuFAdwZVpMrmOjRhafNd0oDDqHVV0yyvy/eHESCX0CHlkadamT9
AxnzsM8V7L5uIQwk+pu6ejIKZ/Pc640vsRR9VA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 13:02:05 2026 by rpki-client