Route Origin Authorization
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32653a3a2f34382d3438203d3e203637313536.roa
File: 323830343a323639633a32653a3a2f34382d3438203d3e203637313536.roa (raw, json)
Hash identifier: XwYk7VaC4DO6DXTsD2xvXBpj8L5GkQFNGqSog9NBCAY=
Subject key identifier: 7F:C4:8A:95:47:98:3A:B3:3F:2D:14:5D:D1:45:83:97:63:A3:3E:59
Certificate issuer: /CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Certificate serial: 57E7BAFD4EF2DB7CCE91078543A3EE90A9BFD2B1
Authority key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject info access: rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32653a3a2f34382d3438203d3e203637313536.roa
Signing time: Sun 26 Apr 2026 01:15:02 +0000
ROA not before: Sun 26 Apr 2026 01:10:02 +0000
ROA not after: Sun 25 Apr 2027 01:15:02 +0000
asID: 67156
IP address blocks: 2804:269c:2e::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:e7:ba:fd:4e:f2:db:7c:ce:91:07:85:43:a3:ee:90:a9:bf:d2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Validity
Not Before: Apr 26 01:10:02 2026 GMT
Not After : Apr 25 01:15:02 2027 GMT
Subject: CN=7FC48A9547983AB33F2D145DD145839763A33E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:0b:cf:18:0a:3e:4b:5b:d8:54:1b:f6:ab:
c6:99:f6:ca:71:93:13:25:39:20:cb:a4:54:73:39:
80:02:39:81:77:b9:2c:60:3c:ff:a5:15:04:e2:27:
b4:f9:ef:ea:91:ef:77:7c:74:79:e2:a8:66:9d:9f:
33:05:b7:9a:d4:fb:5e:a3:a1:66:de:2b:14:c9:65:
7b:ec:43:e6:c3:63:71:05:56:31:70:f5:48:0d:2c:
9b:eb:bc:08:f8:89:99:1d:63:20:ba:42:4f:ad:f7:
1e:42:3f:d0:43:f9:6f:54:da:f4:b0:74:ac:2d:2b:
e6:e5:3d:74:4c:f8:08:dc:f8:68:26:fd:ee:8b:dd:
64:ed:bd:52:86:20:d3:da:6c:b3:70:93:24:d7:4b:
30:b3:97:56:63:fc:84:6f:85:3c:86:a5:64:5a:0a:
41:24:74:bd:9c:9f:c6:09:43:59:81:67:e4:6d:b0:
ee:ee:36:76:34:bc:37:bc:e2:08:25:b7:f7:42:a9:
77:77:fc:54:8e:ce:c9:44:7d:ba:4d:16:bb:43:4d:
95:29:68:ba:d3:7c:46:88:fa:71:b9:1a:4e:e7:78:
d2:fb:36:47:b9:21:6d:c5:6c:d1:0a:d6:af:20:51:
33:b8:d9:b9:28:95:08:f7:90:90:45:53:b8:4f:ef:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C4:8A:95:47:98:3A:B3:3F:2D:14:5D:D1:45:83:97:63:A3:3E:59
X509v3 Authority Key Identifier:
keyid:16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject Information Access:
Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32653a3a2f34382d3438203d3e203637313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:269c:2e::/48
Signature Algorithm: sha256WithRSAEncryption
2a:a6:80:22:89:ba:53:25:ab:3c:9c:50:56:59:c6:0c:a7:64:
19:3c:43:58:9c:d0:20:f8:16:79:d8:eb:d1:ef:13:23:0c:ca:
cc:44:11:63:60:13:77:9f:0a:e5:3d:92:98:95:bf:51:38:ad:
fc:36:cb:de:26:09:d1:91:48:c4:13:05:6f:e2:d5:a8:df:86:
7a:4e:8e:52:f5:4e:b4:72:fa:e7:1e:3a:3e:3a:01:97:6d:9c:
b8:c6:45:bd:90:ea:5d:83:7d:cc:f4:1e:ee:aa:bc:57:85:ac:
77:6c:aa:ae:ea:c3:48:c0:40:6e:0d:b0:a7:ba:ed:ff:00:0b:
ea:6e:b7:08:47:7b:be:0a:15:6c:7b:9c:04:40:85:3c:70:89:
db:39:63:8e:40:33:21:23:ed:2a:96:e3:66:a7:77:93:d6:31:
a3:fb:07:0c:fb:e9:56:d7:3e:dc:4f:17:95:69:a1:74:16:2b:
5c:ca:4c:25:0e:55:65:63:f3:15:20:ed:05:97:f8:47:52:2e:
30:2b:9e:d7:64:1a:e8:aa:95:38:d7:6a:5f:5d:89:0a:78:3f:
37:5e:de:1e:e0:57:6a:3a:34:88:67:9a:ed:19:26:a7:74:24:
c5:59:38:13:24:7b:ce:fa:16:f8:55:81:3a:a6:47:30:88:9b:
c6:9f:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:40:05 2026 by rpki-client