Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer: CRL has expired

Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/AS23507.asa
File:                     AS23507.asa (raw, json)
Hash identifier:          R8Y+7hFGzucocYdSgCovVHf1BJqRcfHZmoKLzB/DAJ4=
Subject key identifier:   B4:A8:47:89:B6:6C:F9:6E:C6:E4:80:8E:73:AD:27:12:58:F4:C3:13
Certificate issuer:       /CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
Certificate serial:       0D631891EB8CACEFF41A7DFEA070CFA14A408061
Authority key identifier: C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/AS23507.asa
Signing time:             Fri 30 Oct 2026 20:54:20 +0000
ASPA not before:          Fri 30 Oct 2026 20:49:20 +0000
ASPA not after:           Fri 29 Oct 2027 20:54:20 +0000
Customer ASID:            23507
Providers:                AS: 835
                          AS: 1002
                          AS: 6939
                          AS: 20473
                          AS: 21738
                          AS: 52025
                          AS: 204044
                          AS: 205941
                          AS: 210464
                          AS: 213669
                          AS: 213683
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:63:18:91:eb:8c:ac:ef:f4:1a:7d:fe:a0:70:cf:a1:4a:40:80:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
        Validity
            Not Before: Oct 30 20:49:20 2026 GMT
            Not After : Oct 29 20:54:20 2027 GMT
        Subject: CN=B4A84789B66CF96EC6E4808E73AD271258F4C313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:86:ee:38:da:5f:ba:3c:05:55:22:f2:0d:
                    58:8d:95:66:ff:25:32:4d:46:25:24:16:12:39:dd:
                    17:42:1b:ff:a1:6d:de:bf:91:4b:b9:2f:30:70:ac:
                    1d:96:18:91:f2:b8:e8:bf:ef:95:69:ab:4a:fd:46:
                    dc:8e:aa:89:8c:93:dd:5c:07:58:77:df:d1:07:0d:
                    94:57:e2:12:29:b9:f9:f1:43:c5:0d:12:f0:fd:52:
                    f8:ac:b2:87:a3:13:42:4e:fd:2d:9b:ba:63:cb:6e:
                    e4:c0:aa:6d:00:c1:da:af:70:b6:52:bd:85:0b:15:
                    43:bb:57:06:9d:60:a1:84:f0:d1:18:3f:65:75:62:
                    8f:10:3d:86:64:35:b8:46:aa:49:84:ac:f9:25:e6:
                    ca:98:e7:e2:27:19:59:ea:6c:fe:a0:2c:f5:40:16:
                    e6:a8:a9:d1:e8:30:62:0b:a4:a4:f4:49:45:39:cd:
                    c0:76:ec:15:60:a2:9c:69:87:31:d3:4c:0b:cc:68:
                    b2:d1:5a:33:48:00:f7:a0:ab:25:56:ce:3f:23:a1:
                    b1:87:de:20:b9:2e:4c:83:1a:5e:ee:2d:03:09:c8:
                    72:cf:8d:25:7e:f6:30:7c:4b:2e:fe:ab:c5:76:ec:
                    99:f2:9f:e4:a5:49:ca:ba:e9:1f:06:1a:9f:37:71:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A8:47:89:B6:6C:F9:6E:C6:E4:80:8E:73:AD:27:12:58:F4:C3:13
            X509v3 Authority Key Identifier:
                keyid:C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/AS23507.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23507

    Signature Algorithm: sha256WithRSAEncryption
         82:1f:74:27:5c:c1:1d:a1:16:55:ac:5d:ff:d3:46:f4:95:c5:
         7c:1e:e5:b5:2e:99:b8:2a:8a:e3:61:08:2d:e7:bc:27:cf:87:
         69:9b:35:5d:ea:66:a3:08:d1:ab:67:32:f7:65:f6:3b:5f:5d:
         8e:8e:c8:a4:7d:37:bf:2c:13:08:e1:53:96:8d:a5:f4:16:59:
         f7:c9:30:14:e8:ea:e0:7f:3f:ae:2b:de:27:da:58:6b:9d:1b:
         8a:74:8b:ef:8c:dd:be:bb:6d:a9:13:13:90:4a:c3:e9:1f:dd:
         d0:55:3f:c9:ff:f3:ab:e9:a0:e0:d9:6d:b6:ca:38:83:85:a0:
         44:42:ba:05:6a:3d:7d:9c:cc:a6:46:ef:3e:53:eb:62:6e:83:
         57:b1:42:bb:d7:ce:dd:17:49:ed:3a:35:19:41:06:b8:ca:fb:
         54:a5:bf:9c:c3:b7:ae:ab:43:d9:05:18:e8:79:ed:af:17:88:
         8b:8c:e8:f9:a7:d5:53:87:7e:3c:27:43:cb:ce:17:aa:3d:d2:
         32:90:6c:d1:c3:09:ad:df:69:e5:99:29:04:d9:45:f6:b8:85:
         3f:b9:c2:ee:ce:7e:b7:9c:c6:31:e9:37:67:5e:cf:79:a2:f4:
         9c:3c:ae:7c:d0:74:c2:56:a7:81:35:04:e5:3d:bd:e9:9d:af:
         9f:29:1e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 15:08:00 2026 by rpki-client