show security pki crl (View)
Syntax
Release Information
Command modified in Junos OS Release 8.5.
Description
Display information about the certificate revocation lists (CRLs) configured on the device.
Options
- none—Display basic information about all CRLs.
- brief | detail—(Optional) Display the specified level of output.
- ca-profile ca-profile-name- (Optional) Display information about only the specified CA profile.
Required Privilege Level
view
List of Sample Output
show security pki crl ca-profile ca2show security pki crl ca-profile ca2 brief
show security pki crl ca-profile ca2 detail
Output Fields
Table 1 lists the output fields for the show security pki crl command. Output fields are listed in the approximate order in which they appear.
Table 1: show security pki crl Output Fields
Field Name | Field Description |
|---|---|
CA profile | Name of the configured CA profile. |
CRL version | Revision number of the certificate revocation list. |
CRL issuer | Authority that issued the digital certificate, including details of the authority organized using the distinguished name format. Possible subfields are:
|
Effective date | Date and time the certificate revocation list becomes valid. |
Next update | Date and time the routing platform will download the latest version of the certificate revocation list. |
Revocation List | List of digital certificates that have been revoked before their expiration date. Values are:
|
Sample Output
show security pki crl ca-profile ca2
user@host> show
security pki crl ca-profile ca2 CA profile: ca2 CRL version: V00000001 CRL issuer: emailAddress = user@example.net, C = US, ST = ca, L = sunnyvale, O = Example, OU = SPG QA, CN = 2000-example-net Effective date: 04-26-2007 18:47 Next update: 05- 4-2007 07:07
Sample Output
show security pki crl ca-profile ca2 brief
user@host> show
security pki crl ca-profile ca2 brief CA profile: ca2 CRL version: V00000001 CRL issuer: emailAddress = user@example.net, C = US, ST = ca, L = sunnyvale, O = Example, OU = SPG QA, CN = 2000-example-net Effective date: 04-26-2007 18:47 Next update: 05- 4-2007 07:07
Sample Output
show security pki crl ca-profile ca2 detail
user@host> show
security pki crl ca-profile ca2 detail CA profile: ca2
CRL version: V00000001
CRL issuer: emailAddress = user@example.net, C = US, ST = ca, L = sunnyvale, O = Example, OU = SPG QA, CN = 2000-example-net
Effective date: 04-26-2007 18:47
Next update: 05- 4-2007 07:07
Revocation List:
Serial number Revocation date
174e6399000000000506 03-16-2007 23:09
174ef3f3000000000507 03-16-2007 23:09
17529cd6000000000508 03-16-2007 23:09
1763ac26000000000509 03-16-2007 23:09
21904e5700000000050a 03-16-2007 23:09
2191cf7900000000050b 03-16-2007 23:09
21f10eb600000000050c 03-16-2007 23:09
2253ca2a00000000050f 03-16-2007 23:09
2478939b000000000515 03-16-2007 23:09
24f35004000000000516 03-16-2007 23:09
277ddfa8000000000517 03-16-2007 23:09
277e97bd000000000518 03-16-2007 23:09
27846a76000000000519 03-16-2007 23:09
2785176f00000000051a 03-16-2007 23:09
