[Contents] [Prev] [Next] [Index] [Report an Error]

show security pki crl

Syntax



show security pki crl
         
           <                  brief                     |                   detail>
<ca-profile            ca-profile-name         >

Release Information

Command modified in Release 8.5 of JUNOS software.

Description

Display information about the certificate revocation lists (CRLs) configured on the device.

This statement is supported on J-series and SRX-series devices.

Options

none—Display basic information about all CRLs.

brief | detail—(Optional) Display the specified level of output.

ca-profile ca-profile-name- (Optional) Display information about only the specified CA profile.

Required Privilege Level

view

List of Sample Output

show security pki crl ca-profile ca2
show security pki crl ca-profile ca2 brief
show security pki crl ca-profile ca2 detail

Output Fields

Table 84 lists the output fields for the show security pki crl command. Output fields are listed in the approximate order in which they appear.

Table 84: show security pki crl Output Fields

Field Name	Field Description
CA profile	Name of the configured CA profile.
CRL version	Revision number of the certificate revocation list.
CRL issuer	Authority that issued the digital certificate, including details of the authority organized using the distinguished name format. Possible subfields are: emailAddress—Mail address of the issuing authority. C—Country of origin. ST—State of origin. L—Locality of origin. O—Organization of origin. OU—Department within an organization. CN—Name of the authority.
Effective date	Date and time the certificate revocation list becomes valid.
Next update	Date and time the routing platform will download the latest version of the certificate revocation list.
Revocation List	List of digital certificates that have been revoked before their expiration date. Values are: Serial number—Unique serial number of the digital certificate. Revocation date—Date and time that the digital certificate was revoked.

show security pki crl ca-profile ca2

user@host> show
security pki crl ca-profile ca2

CA profile: ca2
  CRL version: V00000001
  CRL issuer: emailAddress = asaini@juniper.net, C = US, ST = ca, L = sunnyvale, O = Juniper networks, OU = SPG QA, CN = 2000-spg-juniper-net
  Effective date: 04-26-2007 18:47
  Next update: 05- 4-2007 07:07

show security pki crl ca-profile ca2 brief

user@host> show
security pki crl ca-profile ca2 brief

CA profile: ca2
  CRL version: V00000001
  CRL issuer: emailAddress = asaini@juniper.net, C = US, ST = ca, L = sunnyvale, O = Juniper networks, OU = SPG QA, CN = 2000-spg-juniper-net
  Effective date: 04-26-2007 18:47
  Next update: 05- 4-2007 07:07

show security pki crl ca-profile ca2 detail

user@host> show
security pki crl ca-profile ca2 detail

CA profile: ca2
  CRL version: V00000001
  CRL issuer: emailAddress = asaini@juniper.net, C = US, ST = ca, L = sunnyvale, O = Juniper networks, OU = SPG QA, CN = 2000-spg-juniper-net
  Effective date: 04-26-2007 18:47
  Next update: 05- 4-2007 07:07
  Revocation List:
    Serial number              Revocation date
    174e6399000000000506       03-16-2007 23:09
    174ef3f3000000000507       03-16-2007 23:09
    17529cd6000000000508       03-16-2007 23:09
    1763ac26000000000509       03-16-2007 23:09
    21904e5700000000050a       03-16-2007 23:09
    2191cf7900000000050b       03-16-2007 23:09
    21f10eb600000000050c       03-16-2007 23:09
    2253ca2a00000000050f       03-16-2007 23:09
    2478939b000000000515       03-16-2007 23:09
    24f35004000000000516       03-16-2007 23:09
    277ddfa8000000000517       03-16-2007 23:09
    277e97bd000000000518       03-16-2007 23:09
    27846a76000000000519       03-16-2007 23:09
    2785176f00000000051a       03-16-2007 23:09