Error: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: CRL has expired
Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42689.roa
File: AS42689.roa (raw, json)
Hash identifier: Tmpst2EwQNhAvQWFBka/Mq8t0NlnTVYF5IEg4HSEk8o=
Subject key identifier: 9B:98:46:22:9A:2C:85:22:22:2A:6F:43:3E:3D:05:2D:E1:B7:F4:72
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2E5F2CC115A608552BAAF495D0BCE9E7A97A01F3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42689.roa
Signing time: Sun 01 Nov 2026 00:08:44 +0000
ROA not before: Sun 01 Nov 2026 00:03:44 +0000
ROA not after: Sun 31 Oct 2027 00:08:44 +0000
asID: 42689
IP address blocks: 51.146.140.0/24 maxlen: 24
51.146.154.0/24 maxlen: 24
51.146.157.0/24 maxlen: 24
51.146.159.0/24 maxlen: 24
51.146.208.0/23 maxlen: 24
51.146.210.0/24 maxlen: 24
51.194.48.0/22 maxlen: 24
51.194.60.0/22 maxlen: 24
51.194.188.0/24 maxlen: 24
51.194.189.0/24 maxlen: 24
78.105.141.0/24 maxlen: 24
78.105.170.0/24 maxlen: 24
94.116.8.0/22 maxlen: 24
94.116.76.0/22 maxlen: 24
94.116.88.0/22 maxlen: 24
94.116.124.0/22 maxlen: 24
94.118.247.0/24 maxlen: 24
94.118.253.0/24 maxlen: 24
94.118.255.0/24 maxlen: 24
94.192.196.0/22 maxlen: 24
94.194.4.0/22 maxlen: 24
94.194.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:5f:2c:c1:15:a6:08:55:2b:aa:f4:95:d0:bc:e9:e7:a9:7a:01:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Nov 1 00:03:44 2026 GMT
Not After : Oct 31 00:08:44 2027 GMT
Subject: CN=9B9846229A2C8522222A6F433E3D052DE1B7F472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:23:ce:c0:4b:82:57:92:8a:dd:ba:ff:94:
b7:9d:1c:ce:64:1b:ce:d3:8c:3e:d9:46:ec:d6:2c:
35:e8:bd:58:8e:53:43:eb:4b:9f:4e:8b:bf:28:5e:
58:8c:17:1d:0e:4c:c4:97:b3:b1:15:ea:bd:30:50:
c9:6d:0b:a7:63:07:c1:c7:d1:e6:78:b8:25:9d:0d:
d6:2f:40:b3:34:84:e4:45:4f:27:17:2b:e8:06:4e:
1a:1d:73:c1:c2:91:6d:81:bc:af:fc:d6:78:b7:4b:
87:89:49:f6:86:86:e2:4f:d1:94:48:b5:2c:bb:9b:
b0:0b:27:f6:c7:80:63:25:16:e0:4c:a2:0d:29:ef:
fd:3f:be:a0:02:ad:37:95:a9:4a:89:a4:59:5a:aa:
d6:fd:43:f6:06:d4:48:02:e7:81:f8:0a:15:e1:42:
4f:f0:14:a7:49:07:b8:53:4e:84:a7:12:7a:68:bd:
8a:bf:26:f8:4e:3e:bc:43:91:79:ac:4d:89:52:f2:
2e:2f:e7:5f:7c:75:e4:0e:a7:75:20:a8:be:1e:b4:
1e:98:25:95:be:7a:79:e4:b2:61:55:87:b4:f2:d7:
20:d4:6b:71:f7:ca:cd:95:9a:e8:94:d5:7d:0d:21:
0d:be:1c:19:3a:0b:a7:d2:c9:7c:33:5d:b0:2b:0b:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:98:46:22:9A:2C:85:22:22:2A:6F:43:3E:3D:05:2D:E1:B7:F4:72
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/AS42689.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.140.0/24
51.146.154.0/24
51.146.157.0/24
51.146.159.0/24
51.146.208.0-51.146.210.255
51.194.48.0/22
51.194.60.0/22
51.194.188.0/23
78.105.141.0/24
78.105.170.0/24
94.116.8.0/22
94.116.76.0/22
94.116.88.0/22
94.116.124.0/22
94.118.247.0/24
94.118.253.0/24
94.118.255.0/24
94.192.196.0/22
94.194.4.0/22
94.194.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:e4:d5:24:52:c2:91:82:45:f6:68:70:b9:76:72:26:b9:9c:
1a:fa:70:d9:4c:c6:30:6f:24:4c:91:fc:39:55:a8:a4:d0:3f:
e4:c6:71:40:47:19:02:4d:91:c1:b7:92:e9:29:61:8f:b6:c2:
18:e7:67:76:14:c6:3a:29:a1:d9:cd:a4:f6:c3:80:bf:74:92:
ca:dd:6c:ef:14:8e:94:ad:cb:6d:47:da:4b:91:5b:e6:57:78:
0f:fe:f5:51:af:96:44:d1:95:a9:18:df:98:51:24:6f:1f:d7:
e1:82:54:91:36:86:58:f7:3d:ed:26:8c:92:ec:8d:45:73:3b:
66:21:7d:d3:80:c1:25:ee:c5:36:88:b6:9f:15:89:09:01:12:
83:75:24:a9:07:2b:32:7e:c5:1a:1d:29:fd:76:0f:27:21:6f:
1c:94:6f:ad:22:5b:36:b1:ba:e7:23:19:ba:6a:2a:99:52:5d:
56:2b:b6:77:c2:b0:ec:8f:68:e5:bb:7a:0c:95:ba:85:bb:d0:
f8:34:ee:05:d7:03:41:88:16:5c:ed:bc:5c:aa:b3:7e:69:0c:
15:71:5f:d6:09:02:69:5a:a8:de:4f:53:ea:9d:ad:c2:33:91:
54:8e:e9:e2:a4:ad:cb:6c:3b:34:a2:f1:bf:16:a8:69:11:52:
cf:35:46:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 08:37:07 2026 by rpki-client