Error: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: CRL has expired
Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: TpGrGdh3LcaUVDcimbE0mm59v2oO2vCdyzHjoLwPPcE=
Subject key identifier: 6A:34:D2:53:53:74:BA:DC:2A:EA:9C:BC:F7:E3:47:56:88:57:8E:30
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 04F87D7AA1994E315EAF5326D466C0B862DE1AA3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
Signing time: Mon 12 Oct 2026 08:13:23 +0000
ROA not before: Mon 12 Oct 2026 08:08:23 +0000
ROA not after: Mon 11 Oct 2027 08:13:23 +0000
asID: 212238
IP address blocks: 46.202.249.0/24 maxlen: 24
46.202.250.0/24 maxlen: 24
46.203.0.0/24 maxlen: 24
46.203.7.0/24 maxlen: 24
46.203.34.0/24 maxlen: 24
46.203.40.0/24 maxlen: 24
46.203.73.0/24 maxlen: 24
46.203.79.0/24 maxlen: 24
46.203.103.0/24 maxlen: 24
46.203.115.0/24 maxlen: 24
46.203.147.0/24 maxlen: 24
46.203.154.0/24 maxlen: 24
46.203.157.0/24 maxlen: 24
46.203.185.0/24 maxlen: 24
46.203.190.0/24 maxlen: 24
46.203.195.0/24 maxlen: 24
91.124.129.0/24 maxlen: 24
91.124.144.0/24 maxlen: 24
91.124.187.0/24 maxlen: 24
92.112.52.0/24 maxlen: 24
92.112.53.0/24 maxlen: 24
92.112.57.0/24 maxlen: 24
92.112.67.0/24 maxlen: 24
92.112.77.0/24 maxlen: 24
92.112.81.0/24 maxlen: 24
92.112.92.0/24 maxlen: 24
92.112.119.0/24 maxlen: 24
92.112.128.0/24 maxlen: 24
92.112.137.0/24 maxlen: 24
92.112.143.0/24 maxlen: 24
92.113.48.0/24 maxlen: 24
92.113.194.0/24 maxlen: 24
95.134.179.0/24 maxlen: 24
95.134.185.0/24 maxlen: 24
95.134.212.0/24 maxlen: 24
95.135.7.0/24 maxlen: 24
95.135.39.0/24 maxlen: 24
95.135.41.0/24 maxlen: 24
95.135.50.0/24 maxlen: 24
95.135.59.0/24 maxlen: 24
95.135.101.0/24 maxlen: 24
95.135.105.0/24 maxlen: 24
95.135.109.0/24 maxlen: 24
95.135.162.0/24 maxlen: 24
95.135.230.0/24 maxlen: 24
178.92.58.0/24 maxlen: 24
178.92.62.0/24 maxlen: 24
178.92.100.0/24 maxlen: 24
178.92.205.0/24 maxlen: 24
178.92.209.0/24 maxlen: 24
178.93.91.0/24 maxlen: 24
178.93.110.0/24 maxlen: 24
178.93.165.0/24 maxlen: 24
178.93.171.0/24 maxlen: 24
178.93.177.0/24 maxlen: 24
178.93.183.0/24 maxlen: 24
178.93.184.0/24 maxlen: 24
178.93.200.0/24 maxlen: 24
178.93.201.0/24 maxlen: 24
178.93.231.0/24 maxlen: 24
178.94.25.0/24 maxlen: 24
178.94.42.0/24 maxlen: 24
178.94.161.0/24 maxlen: 24
178.94.209.0/24 maxlen: 24
178.94.213.0/24 maxlen: 24
178.94.215.0/24 maxlen: 24
178.94.231.0/24 maxlen: 24
178.94.237.0/24 maxlen: 24
178.95.12.0/24 maxlen: 24
178.95.13.0/24 maxlen: 24
178.95.25.0/24 maxlen: 24
178.95.48.0/24 maxlen: 24
178.95.72.0/24 maxlen: 24
178.95.101.0/24 maxlen: 24
178.95.123.0/24 maxlen: 24
178.95.155.0/24 maxlen: 24
178.95.196.0/24 maxlen: 24
178.95.224.0/24 maxlen: 24
178.95.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f8:7d:7a:a1:99:4e:31:5e:af:53:26:d4:66:c0:b8:62:de:1a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 12 08:08:23 2026 GMT
Not After : Oct 11 08:13:23 2027 GMT
Subject: CN=6A34D2535374BADC2AEA9CBCF7E3475688578E30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:ab:51:f2:d0:94:6c:6f:26:50:dc:89:43:
7d:04:cf:9c:ef:14:9d:35:1d:6c:69:f6:8a:82:1b:
88:7f:d8:ce:c6:52:13:c3:dc:bf:f5:1d:e5:7c:41:
27:98:b2:88:bb:3a:48:cc:5e:c2:53:ad:ae:b3:33:
ba:1c:c0:34:d5:91:f2:db:ff:7c:7c:ce:57:d9:f1:
0b:4b:dc:d3:c7:7d:14:16:71:e5:f3:b7:68:3c:2e:
e7:f9:51:0e:20:6e:38:03:9f:a0:35:31:a8:e1:84:
97:5c:9c:c5:82:74:04:e1:b6:31:ed:70:8a:82:6b:
b4:6c:06:32:6a:09:e6:4e:58:ba:7c:46:a9:99:6c:
2f:b3:a7:ae:ab:8a:76:65:6e:8a:2e:38:f8:af:ee:
13:48:76:84:dc:94:20:7e:e3:f3:94:7d:bb:ec:de:
65:1c:7c:eb:01:96:1d:ef:3f:d6:05:ad:ad:d2:de:
d3:61:fd:80:08:eb:08:a9:14:c3:d6:6d:64:c1:cb:
f2:cc:fe:ce:55:9e:f5:44:e9:bd:1b:c9:68:8c:c1:
02:b6:2d:1a:4e:a0:7d:b5:37:e2:48:2e:9a:9c:ab:
82:86:fb:2d:e4:18:9e:3d:42:67:c1:bd:e5:7a:8d:
25:82:1e:7b:3f:6c:6b:38:8f:06:fd:82:9b:0b:2f:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:34:D2:53:53:74:BA:DC:2A:EA:9C:BC:F7:E3:47:56:88:57:8E:30
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.249.0-46.202.250.255
46.203.0.0/24
46.203.7.0/24
46.203.34.0/24
46.203.40.0/24
46.203.73.0/24
46.203.79.0/24
46.203.103.0/24
46.203.115.0/24
46.203.147.0/24
46.203.154.0/24
46.203.157.0/24
46.203.185.0/24
46.203.190.0/24
46.203.195.0/24
91.124.129.0/24
91.124.144.0/24
91.124.187.0/24
92.112.52.0/23
92.112.57.0/24
92.112.67.0/24
92.112.77.0/24
92.112.81.0/24
92.112.92.0/24
92.112.119.0/24
92.112.128.0/24
92.112.137.0/24
92.112.143.0/24
92.113.48.0/24
92.113.194.0/24
95.134.179.0/24
95.134.185.0/24
95.134.212.0/24
95.135.7.0/24
95.135.39.0/24
95.135.41.0/24
95.135.50.0/24
95.135.59.0/24
95.135.101.0/24
95.135.105.0/24
95.135.109.0/24
95.135.162.0/24
95.135.230.0/24
178.92.58.0/24
178.92.62.0/24
178.92.100.0/24
178.92.205.0/24
178.92.209.0/24
178.93.91.0/24
178.93.110.0/24
178.93.165.0/24
178.93.171.0/24
178.93.177.0/24
178.93.183.0-178.93.184.255
178.93.200.0/23
178.93.231.0/24
178.94.25.0/24
178.94.42.0/24
178.94.161.0/24
178.94.209.0/24
178.94.213.0/24
178.94.215.0/24
178.94.231.0/24
178.94.237.0/24
178.95.12.0/23
178.95.25.0/24
178.95.48.0/24
178.95.72.0/24
178.95.101.0/24
178.95.123.0/24
178.95.155.0/24
178.95.196.0/24
178.95.224.0/24
178.95.227.0/24
Signature Algorithm: sha256WithRSAEncryption
76:34:d5:8a:61:f7:1a:40:b5:e0:ff:eb:af:76:7a:cf:46:23:
b4:c0:76:21:c2:9f:6b:e7:86:fd:3c:c5:ff:d6:37:b7:ec:95:
80:e2:7d:45:73:f5:7e:9c:6f:ce:eb:d9:80:df:3c:09:fe:cd:
07:96:06:dc:3e:85:ef:b4:4d:09:54:e4:43:4a:ef:93:85:20:
ab:0e:c2:f1:fa:d9:4c:59:d7:ba:71:3f:25:21:51:27:c2:81:
1f:7d:3a:ac:b3:35:b4:77:49:ff:de:a9:43:4e:b2:2b:d7:22:
59:98:30:a3:53:02:a2:03:d2:94:40:7a:8c:7d:90:d8:8c:ed:
6c:68:e0:1c:a4:b3:81:d7:f6:eb:18:25:33:c2:22:db:8d:a5:
f4:18:0a:f0:e8:9f:27:c2:9d:ee:a9:ea:7b:76:b2:1c:9d:94:
6d:f3:b8:d3:e8:e7:4d:81:a5:fa:59:28:81:f7:f6:34:5c:ba:
34:c4:94:42:67:31:fe:a0:6a:c5:b4:cd:78:e4:fe:40:cf:7e:
dd:86:18:8b:27:e9:c9:d5:08:de:e0:99:bc:7d:43:bf:1f:68:
93:92:d3:42:d7:8a:e5:6e:3a:df:c1:ac:3a:63:84:c3:62:7d:
ae:2d:34:eb:43:7b:b3:b8:c2:3d:d5:ab:3f:0c:67:52:de:18:
82:89:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 09:35:21 2026 by rpki-client