
Error: rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki.sailx.co/repo/Sail-Internet-Inc/1/36392e31322e352e302f32342d3234203d3e203633343530.roa
File: 36392e31322e352e302f32342d3234203d3e203633343530.roa (raw, json)
Hash identifier: gh8ZDyRzCulokXYI5eq27VaOw66EmOlvl8uq8SuAI10=
Subject key identifier: BD:D2:5B:38:4E:CB:3F:16:78:B0:E5:C3:90:78:73:9E:8D:22:B1:23
Certificate issuer: /CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
Certificate serial: 2C4E5C9CDD40D88FFA0F0A4F95E0999129B98505
Authority key identifier: 3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
Subject info access: rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/36392e31322e352e302f32342d3234203d3e203633343530.roa
Signing time: Sun 23 Aug 2026 18:40:40 +0000
ROA not before: Sun 23 Aug 2026 18:35:40 +0000
ROA not after: Sun 22 Aug 2027 18:40:40 +0000
asID: 63450
IP address blocks: 69.12.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl
rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 09:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:4e:5c:9c:dd:40:d8:8f:fa:0f:0a:4f:95:e0:99:91:29:b9:85:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
Validity
Not Before: Aug 23 18:35:40 2026 GMT
Not After : Aug 22 18:40:40 2027 GMT
Subject: CN=BDD25B384ECB3F1678B0E5C39078739E8D22B123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:f2:33:cf:d2:76:ff:f4:ba:27:7a:a0:79:
10:65:44:b9:a0:04:df:4c:ff:42:9a:04:e0:2a:48:
92:19:7e:ea:2f:25:61:16:04:b9:c6:50:1d:a5:c7:
ed:b8:e9:4f:67:94:e7:d4:6b:a0:e6:cf:4e:e8:d3:
1d:94:91:ca:8b:4d:f7:53:10:01:d3:e3:28:b6:c9:
2f:9a:4a:f1:b0:5d:0d:03:82:a1:34:4e:b2:88:9a:
32:54:7c:bd:8b:8c:08:72:99:2a:3e:7c:26:e4:71:
cc:26:60:e8:4d:ee:09:33:75:55:a8:52:b1:f0:b3:
ce:83:11:a3:37:6c:cf:73:de:7e:16:97:22:f4:27:
93:b7:ae:6c:77:39:9f:90:13:16:a0:2e:fb:0a:02:
00:ad:ab:b1:52:e1:84:67:2b:86:bf:5f:d9:51:af:
60:c4:2c:69:0a:ff:c5:da:58:82:af:43:be:e9:44:
ab:ea:f3:16:a1:6f:01:47:df:b9:55:4a:cf:d7:08:
d8:dc:0f:4a:12:ab:6c:8e:d4:2f:92:88:db:56:da:
48:20:d4:76:0b:89:b7:7b:9a:86:3a:00:9c:a9:a0:
2f:24:08:f3:30:9a:70:df:aa:be:55:e0:2b:0a:47:
0e:1a:bb:64:5a:4f:af:a9:df:14:c8:63:83:33:5e:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D2:5B:38:4E:CB:3F:16:78:B0:E5:C3:90:78:73:9E:8D:22:B1:23
X509v3 Authority Key Identifier:
keyid:3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/36392e31322e352e302f32342d3234203d3e203633343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.12.5.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4b:bc:1d:84:4a:44:31:a6:80:c5:70:5a:8a:f9:6a:01:53:
b9:ed:29:77:70:c7:69:12:1d:35:bc:14:4e:45:72:07:59:7a:
5c:44:a2:36:d6:5d:cd:21:f2:eb:b5:2d:ea:34:82:22:71:32:
ed:fc:9a:71:a4:8d:92:cc:42:db:71:29:88:49:63:07:70:0a:
e5:1e:44:a7:26:c6:87:32:db:05:29:1c:97:51:ff:82:1d:1d:
f6:60:3f:7c:e2:ce:6e:b6:20:fe:96:7b:da:17:e6:50:43:5a:
d9:46:64:4c:62:69:84:2a:ac:2f:2b:58:a5:3e:14:30:4b:87:
3e:51:a3:37:33:23:69:62:d7:99:44:89:02:cf:bd:f2:6b:6e:
56:d2:e6:41:10:68:82:f2:0c:0c:f6:29:14:b2:48:bf:c0:52:
ab:fc:45:b5:6d:ca:21:52:2b:41:97:ef:30:4c:10:90:60:5b:
23:d0:c9:60:2f:8a:48:f6:58:67:c9:ad:89:4a:39:b5:e7:aa:
41:1a:f8:c0:68:21:2b:7d:44:c0:3c:40:19:3d:61:ec:e7:7d:
64:46:fc:79:30:04:a3:46:64:67:cb:d1:b8:a0:87:4d:51:43:
dc:a8:08:a7:6d:32:4b:a2:b0:8e:a2:2e:cf:db:28:47:67:a5:
60:08:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:45 2026 by rpki-client