Route Origin Authorization
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.roa
File: AS61574.roa (raw, json)
Hash identifier: 51uHWrQWZmk1+E5D6h1C65mBe8spxx1/hHUYRDyBkqM=
Subject key identifier: 2C:3D:1F:30:12:D3:7E:99:02:C0:AF:52:A7:27:88:1F:0B:54:6A:04
Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A
Certificate serial: 62716F34D5AB9CB50377661D2322242E62B6FEBC
Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.roa
Signing time: Wed 13 May 2026 00:44:07 +0000
ROA not before: Wed 13 May 2026 00:39:07 +0000
ROA not after: Wed 12 May 2027 00:44:07 +0000
asID: 61574
IP address blocks: 138.185.229.0/24 maxlen: 24
138.185.230.0/24 maxlen: 24
2804:269c:c::/46 maxlen: 48
2804:269c:fe80::/48 maxlen: 48
2804:269c:fe81::/48 maxlen: 48
2804:269c:fe82::/48 maxlen: 48
2804:269c:fe83::/48 maxlen: 48
2804:269c:fe84::/48 maxlen: 48
2804:269c:fe85::/48 maxlen: 48
2804:269c:fe86::/48 maxlen: 48
2804:269c:fe87::/48 maxlen: 48
2804:269c:fe88::/48 maxlen: 48
2804:269c:fe89::/48 maxlen: 48
2804:269c:fe8a::/48 maxlen: 48
2804:269c:fe8b::/48 maxlen: 48
2804:269c:fe8c::/48 maxlen: 48
2804:269c:fe8d::/48 maxlen: 48
2804:269c:fe8e::/48 maxlen: 48
2804:269c:fe8f::/48 maxlen: 48
2804:269c:fe90::/48 maxlen: 48
2804:269c:fe91::/48 maxlen: 48
2804:269c:fe92::/48 maxlen: 48
2804:269c:fe93::/48 maxlen: 48
2804:269c:fe94::/48 maxlen: 48
2804:269c:fe95::/48 maxlen: 48
2804:269c:fe96::/48 maxlen: 48
2804:269c:fe97::/48 maxlen: 48
2804:269c:fe98::/48 maxlen: 48
2804:269c:fe99::/48 maxlen: 48
2804:269c:fe9a::/48 maxlen: 48
2804:269c:fe9b::/48 maxlen: 48
2804:269c:fe9c::/48 maxlen: 48
2804:269c:fe9d::/48 maxlen: 48
2804:269c:fe9e::/48 maxlen: 48
2804:269c:fe9f::/48 maxlen: 48
2804:269c:fea0::/48 maxlen: 48
2804:269c:fea1::/48 maxlen: 48
2804:269c:fea2::/48 maxlen: 48
2804:269c:fea3::/48 maxlen: 48
2804:269c:fea4::/48 maxlen: 48
2804:269c:fea5::/48 maxlen: 48
2804:269c:fea6::/48 maxlen: 48
2804:269c:fea7::/48 maxlen: 48
2804:269c:fea8::/48 maxlen: 48
2804:269c:fea9::/48 maxlen: 48
2804:269c:feaa::/48 maxlen: 48
2804:269c:feab::/48 maxlen: 48
2804:269c:feac::/48 maxlen: 48
2804:269c:fead::/48 maxlen: 48
2804:269c:feae::/48 maxlen: 48
2804:269c:feaf::/48 maxlen: 48
2804:269c:feb0::/48 maxlen: 48
2804:269c:feb1::/48 maxlen: 48
2804:269c:feb2::/48 maxlen: 48
2804:269c:feb3::/48 maxlen: 48
2804:269c:feb4::/48 maxlen: 48
2804:269c:feb5::/48 maxlen: 48
2804:269c:feb6::/48 maxlen: 48
2804:269c:feb7::/48 maxlen: 48
2804:269c:feb8::/48 maxlen: 48
2804:269c:feb9::/48 maxlen: 48
2804:269c:feba::/48 maxlen: 48
2804:269c:febb::/48 maxlen: 48
2804:269c:febc::/48 maxlen: 48
2804:269c:febd::/48 maxlen: 48
2804:269c:febe::/48 maxlen: 48
2804:269c:febf::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:71:6f:34:d5:ab:9c:b5:03:77:66:1d:23:22:24:2e:62:b6:fe:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A
Validity
Not Before: May 13 00:39:07 2026 GMT
Not After : May 12 00:44:07 2027 GMT
Subject: CN=2C3D1F3012D37E9902C0AF52A727881F0B546A04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:73:53:99:e5:c5:3a:79:a5:09:b1:c3:e0:
69:97:36:8a:b0:e9:36:59:08:b9:8d:b2:d1:ea:93:
08:10:72:79:81:98:8e:a7:44:59:ef:98:2a:2f:3a:
3b:d4:08:00:17:34:7f:5c:6c:91:52:cb:35:01:33:
1a:86:8c:7c:82:f8:6b:be:a4:0c:5c:5e:1e:db:30:
50:bf:d9:ff:eb:18:c9:5a:f3:98:f3:8f:06:31:70:
59:05:e8:ef:57:71:1c:25:f4:65:48:02:45:eb:ac:
aa:ff:94:e5:01:cf:47:4d:fd:00:71:d5:d5:ac:af:
1a:59:96:13:a3:26:13:2b:7c:43:91:1d:05:cd:69:
94:bc:51:dc:6a:2f:15:cb:99:0b:e0:cd:00:77:5b:
59:4f:db:34:aa:12:08:8e:0c:ed:5b:28:6a:ca:ef:
54:85:19:7b:f6:b5:40:26:75:9e:c4:f9:cc:5d:a1:
99:6a:cb:d9:49:88:08:05:e6:59:a9:cc:0c:45:8c:
15:06:a0:6f:04:7e:f0:40:fb:41:5b:3f:d7:b0:44:
fc:82:ac:1e:2a:dd:f1:99:16:2b:eb:67:b6:fc:70:
53:ce:f4:dd:e9:75:56:84:67:4b:33:58:0d:1e:36:
10:cd:cb:81:e7:83:5d:a4:69:e1:8f:77:8f:67:4e:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3D:1F:30:12:D3:7E:99:02:C0:AF:52:A7:27:88:1F:0B:54:6A:04
X509v3 Authority Key Identifier:
keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
Subject Information Access:
Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/AS61574.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.229.0-138.185.230.255
IPv6:
2804:269c:c::/46
2804:269c:fe80::/42
Signature Algorithm: sha256WithRSAEncryption
6a:52:a7:c4:93:fc:75:20:b8:41:a2:15:91:0a:de:12:fc:98:
9f:f1:42:9a:82:b4:ca:2e:29:85:a2:b7:39:16:26:e3:ab:c7:
65:8b:0c:29:d1:44:e2:5c:4b:b9:31:e7:a5:2a:8a:33:1c:d9:
aa:aa:5f:99:21:00:91:44:a1:b2:0e:12:a0:f2:5e:79:9e:66:
9a:f7:ca:7b:89:11:64:53:bd:ff:b2:78:b6:50:3f:85:b9:09:
52:f6:b7:f5:2e:38:f0:db:e5:7e:2e:93:ab:40:27:45:76:a0:
88:91:b5:86:08:af:9f:d2:35:a9:57:95:71:78:97:46:91:e4:
d2:89:21:fc:ec:16:c9:cb:fc:fa:fd:bd:6d:64:9c:66:9d:5c:
bd:89:4b:1a:e9:5a:91:34:05:50:b6:09:e5:b1:c7:a9:fb:50:
48:48:0e:9e:0b:fd:cb:45:66:c7:b7:12:70:77:b9:72:7a:60:
84:d1:1a:20:68:58:d4:a5:d8:c3:bb:66:f6:2f:d7:35:67:8d:
fc:55:9e:1c:f3:16:43:d0:1c:8b:aa:ae:aa:cb:c6:77:18:ed:
20:a3:ec:f0:5b:c6:ba:7f:f3:66:43:1e:35:b3:6d:72:c0:ed:
56:0b:04:c8:e5:79:55:56:90:b4:c0:1f:50:7b:a4:a5:39:f7:
a2:51:ed:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:43:47 2026 by rpki-client