Route Origin Authorization
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32633a3a2f34382d3438203d3e203637313536.roa
File: 323830343a323639633a32633a3a2f34382d3438203d3e203637313536.roa (raw, json)
Hash identifier: tsY+zSQsjd3uEr1sjDrg20WnZ+4QuG3OxOVw+QQfzZE=
Subject key identifier: 23:FC:A3:DB:D7:A7:42:5A:CF:10:36:8A:06:2B:92:DE:0F:22:FD:CD
Certificate issuer: /CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Certificate serial: 5EAA2FC2A39B48DD9FFBD65A1AEE88D2DFD76FC0
Authority key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject info access: rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32633a3a2f34382d3438203d3e203637313536.roa
Signing time: Sun 26 Apr 2026 01:14:25 +0000
ROA not before: Sun 26 Apr 2026 01:09:25 +0000
ROA not after: Sun 25 Apr 2027 01:14:25 +0000
asID: 67156
IP address blocks: 2804:269c:2c::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:aa:2f:c2:a3:9b:48:dd:9f:fb:d6:5a:1a:ee:88:d2:df:d7:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Validity
Not Before: Apr 26 01:09:25 2026 GMT
Not After : Apr 25 01:14:25 2027 GMT
Subject: CN=23FCA3DBD7A7425ACF10368A062B92DE0F22FDCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:d4:14:17:a3:7c:e4:63:7d:2f:0a:8e:3b:
53:0f:72:01:df:94:04:ef:d9:48:d3:ff:20:55:33:
3f:8b:20:b3:bc:00:3e:8f:b5:3a:5c:4a:1a:19:3b:
8f:c5:6d:ae:6f:da:08:1c:0b:bb:96:0f:e1:a7:71:
f8:2b:70:84:1e:4b:ac:eb:f1:33:05:8f:6c:15:ac:
c4:a2:12:aa:06:af:a6:24:f2:83:10:d8:7d:59:8a:
d5:e0:8d:d5:03:6f:b3:8e:8b:d9:3f:b5:c2:67:90:
e0:49:24:78:32:37:f4:89:d3:01:8c:7c:72:e0:f9:
84:28:d2:91:87:d4:cd:c7:0f:d5:74:1c:4d:c4:b0:
fb:aa:b9:b5:81:0c:b7:e5:40:01:05:b9:a6:b2:15:
c9:a4:52:10:e2:c7:0c:b5:d1:42:66:c6:55:cd:cb:
09:92:18:a6:25:ca:19:8b:95:16:ba:b8:e8:33:93:
ea:71:d8:99:a4:26:50:81:5c:a6:72:c2:8f:55:e5:
c2:77:d9:37:11:21:89:7b:56:72:2f:54:b2:b5:4b:
3b:9e:ff:46:fa:c4:b4:f6:5a:7b:df:42:c3:5f:3f:
c7:e1:66:31:f4:e9:41:15:b2:3c:80:46:3e:5f:f7:
ee:04:a7:47:31:93:0f:b5:4f:ac:34:d4:c1:b1:84:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FC:A3:DB:D7:A7:42:5A:CF:10:36:8A:06:2B:92:DE:0F:22:FD:CD
X509v3 Authority Key Identifier:
keyid:16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject Information Access:
Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32633a3a2f34382d3438203d3e203637313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:269c:2c::/48
Signature Algorithm: sha256WithRSAEncryption
6e:88:c8:18:34:c2:e3:1d:a4:05:8d:ed:fd:76:72:08:54:82:
47:5a:84:80:10:89:de:fc:df:5c:b4:a7:f8:50:16:25:91:34:
38:f4:3d:75:55:2d:fb:2c:46:14:5b:bf:be:24:71:be:25:b8:
54:10:b3:cc:a5:4b:0b:3e:44:4f:e8:d0:73:a1:5a:20:34:4d:
65:f1:39:ea:07:c8:21:b9:7f:8c:7c:1a:e1:68:3a:6e:e3:80:
87:85:89:fd:d8:19:05:2b:e6:3a:6e:6d:ca:3b:13:dc:52:a3:
d6:80:f0:0f:e1:75:a9:e6:1a:b7:14:ff:f0:0a:d1:1c:10:ca:
ba:a2:65:ed:1e:26:86:d3:13:62:42:ad:35:e8:75:fb:9e:59:
f2:e6:9a:93:0a:fb:4e:a9:01:5d:7a:3e:6a:a2:05:6b:57:70:
41:65:6b:29:c4:aa:81:95:10:c6:f0:9a:73:44:44:20:66:77:
b0:44:2e:29:cc:ec:2d:87:ec:02:fd:9f:10:e4:79:94:d7:6c:
f3:31:60:d6:60:12:2e:39:c0:54:a9:7b:49:ea:de:c7:59:30:
31:35:8f:61:bd:7a:17:f4:13:25:f0:a9:78:ce:16:dc:a5:7b:
3c:12:30:3f:6d:8e:f3:6e:fd:ce:97:7b:a3:7f:8a:43:d2:a1:
01:f3:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:15 2026 by rpki-client