Route Origin Authorization
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32663a3a2f34382d3438203d3e203637313536.roa
File: 323830343a323639633a32663a3a2f34382d3438203d3e203637313536.roa (raw, json)
Hash identifier: gGCXTOqbtmMSz7rtNNP8DjHTnaA3QxOnvJEFRIWUe+I=
Subject key identifier: 46:C1:04:A3:BE:1C:43:BC:F3:16:A9:1E:08:51:97:46:05:45:2F:57
Certificate issuer: /CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Certificate serial: 43260D078C53D11667659DAD2AB51A49D792DF42
Authority key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject info access: rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32663a3a2f34382d3438203d3e203637313536.roa
Signing time: Sun 26 Apr 2026 01:15:19 +0000
ROA not before: Sun 26 Apr 2026 01:10:19 +0000
ROA not after: Sun 25 Apr 2027 01:15:19 +0000
asID: 67156
IP address blocks: 2804:269c:2f::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:26:0d:07:8c:53:d1:16:67:65:9d:ad:2a:b5:1a:49:d7:92:df:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Validity
Not Before: Apr 26 01:10:19 2026 GMT
Not After : Apr 25 01:15:19 2027 GMT
Subject: CN=46C104A3BE1C43BCF316A91E0851974605452F57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:78:6b:ae:14:f2:67:02:a2:21:44:f6:dc:c2:
74:e3:87:7e:e3:da:b4:51:99:52:7e:c5:42:e5:69:
b6:a0:98:72:17:55:17:01:42:fe:f2:1d:c6:a8:b3:
5a:fa:12:eb:40:1b:27:19:fa:30:1d:ea:7c:92:aa:
7d:87:8d:f9:e0:7a:26:f6:89:bf:33:53:6b:e8:71:
b7:45:1f:d4:6b:c7:ca:b0:28:ea:9c:60:b9:92:82:
fc:0f:df:a7:7f:f7:42:c8:1b:35:af:e2:e6:9f:cb:
46:a2:83:73:ac:14:98:16:c9:15:8b:74:12:8f:33:
42:f7:9a:38:ad:48:49:bc:12:57:54:f3:66:a1:62:
82:33:c4:b2:09:61:48:6f:b4:29:6c:b1:b5:1b:cb:
c0:44:29:97:c7:97:55:3e:da:a7:d7:3f:e8:8a:86:
20:2f:ff:26:2c:cf:f0:45:1f:4c:63:17:77:86:e0:
fa:57:cf:8d:ef:0a:28:63:2f:bd:9e:3e:07:04:e6:
8a:a2:4e:e7:1e:af:b5:14:f3:ca:4d:f8:fa:e2:ff:
8c:3e:35:35:18:84:72:ff:56:a0:1d:82:bd:2d:28:
75:90:bf:91:db:0b:3d:dd:19:18:a9:b7:c5:29:df:
e8:c0:0f:ef:81:59:d9:6e:b9:a2:3e:ec:dd:a9:17:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C1:04:A3:BE:1C:43:BC:F3:16:A9:1E:08:51:97:46:05:45:2F:57
X509v3 Authority Key Identifier:
keyid:16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject Information Access:
Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32663a3a2f34382d3438203d3e203637313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:269c:2f::/48
Signature Algorithm: sha256WithRSAEncryption
8e:3d:24:92:5c:e5:de:39:0c:25:a8:7e:97:89:56:c3:e7:ea:
83:63:42:76:a5:53:37:3a:9f:96:47:54:76:f0:85:c4:89:7d:
64:bf:38:0c:52:0a:2b:04:31:7b:29:96:d4:93:c6:2e:bf:c3:
ed:9e:f4:0c:d6:19:aa:9e:83:96:59:1b:e5:98:c9:0a:b9:5a:
69:b8:d8:16:3d:8c:2d:e3:08:a9:48:98:73:28:43:28:93:a1:
ec:c4:34:3e:86:b2:e4:04:28:e9:e5:60:4c:34:48:d5:e6:bd:
83:cf:bd:4d:56:d8:73:d1:05:48:60:bf:85:25:bc:29:b0:84:
5b:ec:12:4c:bd:cd:b6:29:dd:a8:a5:9b:bc:28:23:a5:69:70:
65:37:f3:f9:a9:1a:a6:21:00:5e:c9:61:8b:80:46:38:49:1f:
9b:16:51:ed:50:6b:70:75:3a:01:26:9e:a1:96:af:d0:b0:48:
99:f1:ba:ad:b4:dc:4a:dc:cb:8d:22:13:bb:a4:27:15:d5:d1:
bc:34:20:87:27:4b:3e:bd:8b:08:3a:b8:7b:cd:0c:43:11:2f:
1a:7d:65:f9:b5:ee:6d:9f:22:18:d7:b6:63:63:d7:01:1d:96:
35:f6:ce:79:9a:63:33:ee:20:9d:95:4e:e9:9b:ee:f3:47:10:
8b:60:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:30:39 2026 by rpki-client