show security pki crl

Syntax

show security pki crl < brief | detail><ca-profile ca-profile-name >

Release Information

Command modified in Release 8.5 of Junos OS.

Description

Display information about the certificate revocation lists (CRLs) configured on the device.

Options

none—Display basic information about all CRLs.

brief | detail—(Optional) Display the specified level of output.

ca-profile ca-profile-name- (Optional) Display information about only the specified CA profile.

Required Privilege Level

view

Related Topics

crl

Junos System Basics and Services Command Reference

List of Sample Output

show security pki crl ca-profile ca2
show security pki crl ca-profile ca2 brief
show security pki crl ca-profile ca2 detail

Output Fields

Table 139 lists the output fields for the show security pki crl command. Output fields are listed in the approximate order in which they appear.

Table 139: show security pki crl Output Fields

Field Name

Field Description

CA profile

Name of the configured CA profile.

CRL version

Revision number of the certificate revocation list.

CRL issuer

Authority that issued the digital certificate, including details of the authority organized using the distinguished name format. Possible subfields are:

  • emailAddress—Mail address of the issuing authority.
  • C—Country of origin.
  • ST—State of origin.
  • L—Locality of origin.
  • O—Organization of origin.
  • OU—Department within an organization.
  • CN—Name of the authority.

Effective date

Date and time the certificate revocation list becomes valid.

Next update

Date and time the routing platform will download the latest version of the certificate revocation list.

Revocation List

List of digital certificates that have been revoked before their expiration date. Values are:

  • Serial number—Unique serial number of the digital certificate.
  • Revocation date—Date and time that the digital certificate was revoked.

Sample Output

show security pki crl ca-profile ca2

user@host> show security pki crl ca-profile ca2 
CA profile: ca2
  CRL version: V00000001
  CRL issuer: emailAddress = asaini@juniper.net, C = US, ST = ca, L = sunnyvale, O = Juniper networks, OU = SPG QA, CN = 2000-spg-juniper-net
  Effective date: 04-26-2007 18:47
  Next update: 05- 4-2007 07:07

Sample Output

show security pki crl ca-profile ca2 brief

user@host> show security pki crl ca-profile ca2 brief 
CA profile: ca2
  CRL version: V00000001
  CRL issuer: emailAddress = asaini@juniper.net, C = US, ST = ca, L = sunnyvale, O = Juniper networks, OU = SPG QA, CN = 2000-spg-juniper-net
  Effective date: 04-26-2007 18:47
  Next update: 05- 4-2007 07:07

Sample Output

show security pki crl ca-profile ca2 detail

user@host> show security pki crl ca-profile ca2 detail 
CA profile: ca2
  CRL version: V00000001
  CRL issuer: emailAddress = asaini@juniper.net, C = US, ST = ca, L = sunnyvale, O = Juniper networks, OU = SPG QA, CN = 2000-spg-juniper-net
  Effective date: 04-26-2007 18:47
  Next update: 05- 4-2007 07:07
  Revocation List:
    Serial number              Revocation date
    174e6399000000000506       03-16-2007 23:09
    174ef3f3000000000507       03-16-2007 23:09
    17529cd6000000000508       03-16-2007 23:09
    1763ac26000000000509       03-16-2007 23:09
    21904e5700000000050a       03-16-2007 23:09
    2191cf7900000000050b       03-16-2007 23:09
    21f10eb600000000050c       03-16-2007 23:09
    2253ca2a00000000050f       03-16-2007 23:09
    2478939b000000000515       03-16-2007 23:09
    24f35004000000000516       03-16-2007 23:09
    277ddfa8000000000517       03-16-2007 23:09
    277e97bd000000000518       03-16-2007 23:09
    27846a76000000000519       03-16-2007 23:09
    2785176f00000000051a       03-16-2007 23:09
Copyright© 1999-2010 Juniper Networks, Inc. All rights reserved.