Error: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: CRL has expired

Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/AS214976.asa
File:                     AS214976.asa (raw, json)
Hash identifier:          St3KXxhibkJllZw9wC9iyCoq059wwuJ5BM8uXHq2q2w=
Subject key identifier:   68:32:2E:C8:66:7F:88:7A:89:B2:81:2A:92:69:B5:6A:59:45:86:29
Certificate issuer:       /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Certificate serial:       523DAFF234A5DD7B6F56A3EC484F3C86FEBE8C47
Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/AS214976.asa
Signing time:             Fri 30 Oct 2026 20:54:20 +0000
ASPA not before:          Fri 30 Oct 2026 20:49:20 +0000
ASPA not after:           Fri 29 Oct 2027 20:54:20 +0000
Customer ASID:            214976
Providers:                AS: 205941
                          AS: 210464
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3d:af:f2:34:a5:dd:7b:6f:56:a3:ec:48:4f:3c:86:fe:be:8c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
        Validity
            Not Before: Oct 30 20:49:20 2026 GMT
            Not After : Oct 29 20:54:20 2027 GMT
        Subject: CN=68322EC8667F887A89B2812A9269B56A59458629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:18:99:54:af:91:59:dd:4d:01:d0:f1:1d:
                    c0:65:09:0a:41:1d:40:89:73:24:80:ca:38:33:b7:
                    91:a4:49:21:2e:a8:dd:61:8f:bc:92:c9:a7:e8:5f:
                    6b:72:eb:e2:2a:01:82:81:60:6b:cd:b8:bf:d4:46:
                    5a:f8:f8:cb:b5:57:98:63:e1:26:8b:3d:2c:dd:aa:
                    03:94:06:73:b2:20:82:54:9f:67:2d:05:2e:ca:88:
                    51:7b:7a:5c:9a:db:78:5b:27:19:f2:09:8e:b6:5d:
                    6e:14:f5:c3:06:17:5f:5a:ee:9d:1b:5c:d2:27:58:
                    cc:b5:b1:5e:57:d8:26:ee:7c:6e:d0:fe:de:27:a4:
                    8b:ab:0e:49:00:92:e9:13:9c:39:64:d7:b1:20:f7:
                    1a:a4:7e:cc:d8:7e:66:e7:0c:12:70:29:00:dd:c0:
                    6a:79:30:f1:81:91:d9:77:45:f8:70:2a:3c:1d:58:
                    73:06:85:17:14:bf:ca:7f:c7:97:f4:94:44:ee:72:
                    c7:5c:8d:af:51:1b:86:99:3c:82:e0:35:72:26:ab:
                    bb:d3:b2:8f:1a:ff:3b:a4:ba:56:fe:3e:a4:49:3f:
                    de:c8:9f:43:a0:ac:83:18:70:64:6c:22:d7:6c:52:
                    c3:b9:e4:3d:b8:3d:cb:31:87:73:d2:71:e7:4f:cb:
                    40:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:32:2E:C8:66:7F:88:7A:89:B2:81:2A:92:69:B5:6A:59:45:86:29
            X509v3 Authority Key Identifier:
                keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/AS214976.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214976

    Signature Algorithm: sha256WithRSAEncryption
         19:86:e0:e7:75:e4:c5:ce:9d:ba:25:05:9c:d2:25:18:20:c4:
         a8:df:fe:79:db:dd:49:42:2e:4f:66:9d:21:29:5d:b8:03:1b:
         ba:76:2c:fb:11:36:9b:d2:39:d5:73:6c:7f:2f:f4:10:35:c7:
         b1:5c:1e:1b:99:e2:6e:06:88:24:9a:5d:8e:f5:1b:b9:5a:ff:
         8c:0a:e9:22:fb:91:83:b5:e8:29:95:9e:19:10:44:b4:a2:9a:
         f3:1a:6e:02:77:03:2f:d6:b4:45:6f:32:d4:a9:69:1c:9a:a9:
         32:fe:2b:a1:3c:15:f3:00:9a:dd:27:2e:e0:cc:b9:a0:2c:f0:
         69:c9:b6:ff:cc:c3:4a:f5:9d:e0:74:17:c4:fc:d1:47:26:ec:
         95:ab:3f:71:c1:94:f5:68:34:0f:18:63:fc:9d:5c:65:b1:a2:
         f2:74:52:6d:64:6c:92:4f:42:0c:d1:61:d6:cf:e1:75:8e:53:
         43:c0:2d:68:c4:be:de:be:b3:67:a1:cd:ff:02:65:f7:b6:9a:
         bc:c3:bf:e3:e5:c7:5d:7e:12:3b:25:d8:99:7b:d6:ff:e5:34:
         c4:53:34:e6:e4:62:e6:2a:32:ea:24:05:08:d7:58:1e:15:68:
         52:af:9b:0c:39:b9:12:2d:56:ce:51:c0:b4:8b:ea:ae:06:18:
         83:0f:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 12:51:29 2026 by rpki-client