
Error: rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki.sailx.co/repo/Sail-Internet-Inc/1/36392e31322e362e302f32342d3234203d3e203633343530.roa
File: 36392e31322e362e302f32342d3234203d3e203633343530.roa (raw, json)
Hash identifier: Tbl+ao3ummwi3eo3f1qmLpPY1l2e7fYp+7mqjXyQ01k=
Subject key identifier: 8A:58:A0:89:4E:A7:42:DD:81:08:A4:39:93:05:0C:97:4B:B0:18:24
Certificate issuer: /CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
Certificate serial: 0590A2CEB0F8D38491E1A0956C0CDA9D9BCCA1ED
Authority key identifier: 3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
Subject info access: rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/36392e31322e362e302f32342d3234203d3e203633343530.roa
Signing time: Sun 23 Aug 2026 18:40:44 +0000
ROA not before: Sun 23 Aug 2026 18:35:44 +0000
ROA not after: Sun 22 Aug 2027 18:40:44 +0000
asID: 63450
IP address blocks: 69.12.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl
rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 09:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:90:a2:ce:b0:f8:d3:84:91:e1:a0:95:6c:0c:da:9d:9b:cc:a1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f54a464d1671855d95accdb4316c93159c43576ef3fc67def
Validity
Not Before: Aug 23 18:35:44 2026 GMT
Not After : Aug 22 18:40:44 2027 GMT
Subject: CN=8A58A0894EA742DD8108A43993050C974BB01824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:12:8d:01:a7:79:fa:fa:9a:5d:5f:1a:6a:
5c:be:3d:4e:b3:c4:af:ab:3f:33:2a:cc:4a:91:2f:
ba:82:7f:35:fa:e2:79:38:de:d0:81:d5:12:7b:56:
e2:a8:20:b5:87:25:29:00:c1:2b:aa:93:c2:73:88:
66:a3:6c:28:63:44:23:65:c7:5f:75:18:2c:a5:f2:
41:12:81:29:92:50:c5:60:e0:3b:01:8b:ea:6c:6f:
c0:e1:49:d8:b7:e5:56:5b:b0:54:8b:43:39:58:9b:
7a:8c:f2:92:ac:27:b7:ea:78:5e:d0:b4:c3:24:76:
56:7e:5b:bd:6f:33:55:65:36:02:9f:a5:ab:c0:24:
35:77:8a:da:23:63:47:af:11:da:24:89:e9:f9:29:
6d:7a:68:bd:0f:6e:d0:13:82:55:53:82:ea:e1:68:
ea:1e:77:0f:0a:6a:f1:0e:e4:40:59:22:4c:43:64:
fc:76:b0:86:01:13:49:e4:68:61:e2:f2:88:3f:68:
ab:3a:22:25:1d:ed:a2:b1:b1:d9:6f:8c:46:0a:1b:
70:09:d0:c9:84:e8:6a:d5:6c:43:c1:eb:06:40:60:
04:5d:8e:0b:ea:4a:3c:3c:a4:e4:9a:41:2b:96:27:
95:66:9e:3c:b7:4a:50:2c:ef:35:e2:08:d5:23:1d:
35:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:A0:89:4E:A7:42:DD:81:08:A4:39:93:05:0C:97:4B:B0:18:24
X509v3 Authority Key Identifier:
keyid:3C:5C:ED:74:46:CA:23:5C:39:27:C7:9A:B0:81:FA:FA:BE:F0:A1:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/3C5CED7446CA235C3927C79AB081FAFABEF0A190.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/249e7118-0a9a-465f-a7f0-52ef1aff8bd5/9f54a464d1671855d95accdb4316c93159c43576ef3fc67def.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sailx.co/repo/Sail-Internet-Inc/1/36392e31322e362e302f32342d3234203d3e203633343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.12.6.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:23:0f:29:ae:86:c5:41:10:36:4b:aa:ff:3d:ac:f4:0c:72:
65:36:8b:be:dc:a4:43:2f:c7:15:8f:63:4b:e4:b2:e2:66:2e:
14:b2:da:2d:70:a1:a1:b8:af:27:23:cc:88:63:69:0d:d0:b6:
65:bf:6e:55:4c:30:76:09:a6:7f:b9:0e:d2:b5:81:e4:29:26:
ca:52:7e:3e:82:99:90:fc:c5:d5:94:51:21:35:56:7b:84:ad:
09:de:45:93:9a:06:da:b4:8d:df:3c:dc:1e:60:73:42:01:4f:
9f:7d:1d:b5:f3:c6:f2:84:e3:c9:14:bb:f7:a8:a1:c7:84:83:
06:f5:de:6b:ac:b8:7b:51:2f:7a:ae:71:13:55:44:df:ac:ea:
16:13:eb:b4:03:f6:35:68:48:66:2a:66:71:19:64:d4:d8:fa:
e6:a8:63:73:96:62:ec:36:df:24:46:b9:a4:82:ea:57:a1:25:
ef:26:03:1d:9c:b5:27:c7:5e:83:4c:8f:16:86:28:18:c3:f2:
34:8e:06:b2:bf:20:fa:af:df:2c:af:97:43:31:b6:d6:5e:88:
f1:a3:80:41:82:e7:fd:d6:b0:ee:ce:b3:12:0a:8a:92:a3:24:
20:fa:c8:62:61:af:1e:df:aa:be:86:39:b1:b6:53:f2:60:11:
4c:04:09:17
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIUBZCizrD404SR4aCVbAzanZvMoe0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWY1NGE0NjRkMTY3MTg1NWQ5NWFjY2RiNDMxNmM5MzE1
OWM0MzU3NmVmM2ZjNjdkZWYwHhcNMjYwODIzMTgzNTQ0WhcNMjcwODIyMTg0MDQ0
WjAzMTEwLwYDVQQDEyg4QTU4QTA4OTRFQTc0MkREODEwOEE0Mzk5MzA1MEM5NzRC
QjAxODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFASjQGnefr6
ml1fGmpcvj1Os8Svqz8zKsxKkS+6gn81+uJ5ON7QgdUSe1biqCC1hyUpAMErqpPC
c4hmo2woY0QjZcdfdRgspfJBEoEpklDFYOA7AYvqbG/A4UnYt+VWW7BUi0M5WJt6
jPKSrCe36nhe0LTDJHZWflu9bzNVZTYCn6WrwCQ1d4raI2NHrxHaJInp+Sltemi9
D27QE4JVU4Lq4WjqHncPCmrxDuRAWSJMQ2T8drCGARNJ5Ghh4vKIP2irOiIlHe2i
sbHZb4xGChtwCdDJhOhq1WxDwesGQGAEXY4L6ko8PKTkmkErlieVZp48t0pQLO81
4gjVIx016wIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFIpYoIlOp0LdgQikOZMFDJdL
sBgkMB8GA1UdIwQYMBaAFDxc7XRGyiNcOSfHmrCB+vq+8KGQMA4GA1UdDwEB/wQE
AwIHgDBsBgNVHR8EZTBjMGGgX6Bdhltyc3luYzovL3Jwa2kuc2FpbHguY28vcmVw
by9TYWlsLUludGVybmV0LUluYy8xLzNDNUNFRDc0NDZDQTIzNUMzOTI3Qzc5QUIw
ODFGQUZBQkVGMEExOTAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUH
MAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2kt
dGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRk
LWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8yNDllNzExOC0wYTlhLTQ2NWYt
YTdmMC01MmVmMWFmZjhiZDUvOWY1NGE0NjRkMTY3MTg1NWQ5NWFjY2RiNDMxNmM5
MzE1OWM0MzU3NmVmM2ZjNjdkZWYuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLnNhaWx4LmNvL3JlcG8vU2FpbC1JbnRlcm5ldC1J
bmMvMS8zNjM5MmUzMTMyMmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMz
NDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABFDAYwDQYJKoZIhvcNAQELBQADggEBAKsjDymuhsVB
EDZLqv89rPQMcmU2i77cpEMvxxWPY0vksuJmLhSy2i1woaG4rycjzIhjaQ3QtmW/
blVMMHYJpn+5DtK1geQpJspSfj6CmZD8xdWUUSE1VnuErQneRZOaBtq0jd883B5g
c0IBT599HbXzxvKE48kUu/eooceEgwb13musuHtRL3qucRNVRN+s6hYT67QD9jVo
SGYqZnEZZNTY+uaoY3OWYuw23yRGuaSC6lehJe8mAx2ctSfHXoNMjxaGKBjD8jSO
BrK/IPqv3yyvl0MxttZeiPGjgEGC5/3WsO7OsxIKipKjJCD6yGJhrx7fqr6GObG2
U/JgEUwECRc=
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:11 2026 by rpki-client