Route Origin Authorization

$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32643a3a2f34382d3438203d3e203637313536.roa
File:                     323830343a323639633a32643a3a2f34382d3438203d3e203637313536.roa (raw, json)
Hash identifier:          0zJ5viB9KKltGKQR75lE/DC4hxJjKYs/jmF9DM7tcho=
Subject key identifier:   71:24:5C:47:F3:6A:7D:50:54:F3:12:4B:46:71:7E:DE:E2:DA:63:C2
Certificate issuer:       /CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Certificate serial:       66ACFD9B902A6A52BCA216D879BBB58C9A4D6FEA
Authority key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject info access:      rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32643a3a2f34382d3438203d3e203637313536.roa
Signing time:             Sun 26 Apr 2026 01:14:48 +0000
ROA not before:           Sun 26 Apr 2026 01:09:48 +0000
ROA not after:            Sun 25 Apr 2027 01:14:48 +0000
asID:                     67156
IP address blocks:        2804:269c:2d::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ac:fd:9b:90:2a:6a:52:bc:a2:16:d8:79:bb:b5:8c:9a:4d:6f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
        Validity
            Not Before: Apr 26 01:09:48 2026 GMT
            Not After : Apr 25 01:14:48 2027 GMT
        Subject: CN=71245C47F36A7D5054F3124B46717EDEE2DA63C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ff:93:b9:6b:45:0f:18:99:27:c0:f9:ac:07:
                    99:2b:ae:27:dc:4a:31:c8:65:08:39:22:d1:4f:34:
                    62:06:91:7b:ea:3f:b6:14:74:8a:ae:48:ea:47:75:
                    46:cd:4a:07:db:00:d3:e9:4a:d2:2d:f5:e4:51:0a:
                    60:c8:04:36:e7:f2:e3:31:0d:30:4e:38:30:22:43:
                    8e:6e:70:07:e9:87:e0:75:b6:02:72:b5:31:3f:d8:
                    cd:21:34:5d:61:ba:c1:51:50:b2:c1:40:35:44:b8:
                    e0:cb:2c:4f:9b:1a:83:95:15:14:31:74:7b:44:9b:
                    aa:2d:aa:31:cf:4b:7a:66:cd:d9:6c:a6:e1:6c:35:
                    37:08:62:3b:8f:39:e6:0e:9d:85:cc:4a:bb:32:61:
                    2a:14:8f:0f:30:f2:40:a4:13:4b:98:fb:3f:85:6f:
                    9c:81:07:8a:13:1d:9f:39:50:a9:cc:a9:30:94:1e:
                    78:5f:fc:3d:eb:be:ee:f0:bd:6a:44:38:50:5e:ff:
                    ad:a4:63:8d:88:96:b3:54:a7:b6:16:18:1e:9b:a2:
                    d1:95:4d:1d:d1:11:13:fb:bc:28:b4:6b:d2:a8:84:
                    94:cd:af:39:2a:5b:af:e6:6d:d2:3a:0b:21:5e:8f:
                    32:f1:48:5e:2a:b7:a9:28:7f:2f:e0:53:6d:0e:96:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:24:5C:47:F3:6A:7D:50:54:F3:12:4B:46:71:7E:DE:E2:DA:63:C2
            X509v3 Authority Key Identifier:
                keyid:16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32643a3a2f34382d3438203d3e203637313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:269c:2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:dc:7c:d2:20:f4:da:95:d7:f4:9b:48:f9:0f:e6:a5:33:fe:
         9b:76:3f:52:f0:33:14:91:d6:b1:83:05:8b:7e:33:7f:7c:67:
         9d:81:66:5a:5d:06:f7:8d:b7:c3:bd:ec:3c:27:7d:39:ca:ce:
         77:be:5a:a7:8f:58:bb:a9:0c:07:04:ee:85:0a:32:d3:09:f6:
         e7:a8:6d:d9:5f:75:ea:74:a9:6e:fb:58:c5:2a:7b:3e:eb:ed:
         e6:fd:a8:4c:e1:88:cb:1a:d3:d1:f0:c0:82:5a:5b:ad:c6:4c:
         6b:a2:f4:18:ae:7e:b1:27:e8:51:ca:eb:e7:32:e4:e2:b9:35:
         3c:2a:7b:05:ba:48:c7:e0:04:05:5b:49:11:80:e6:02:c1:64:
         ed:db:f8:7d:8b:88:94:f9:12:cf:73:88:09:04:41:d1:63:02:
         23:4e:07:94:67:94:81:a0:6a:9a:2a:a1:71:9f:ed:fa:20:07:
         47:f9:af:25:cd:e2:f8:99:19:35:a6:c0:c2:36:ee:0f:33:4b:
         70:ab:44:44:6a:2f:66:7c:80:1b:2a:44:9f:05:af:5f:e9:6a:
         05:20:d1:95:0b:6a:d4:86:a3:56:19:be:4c:d6:78:c4:11:8c:
         af:0a:5d:ae:88:9a:d0:4a:7c:b4:bd:39:97:98:0e:52:a5:6a:
         8a:b9:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:51 2026 by rpki-client