show security pki crl (View)
Syntax
show security pki crl
< brief | detail>
<ca-profile ca-profile-name >
Description
Display information about the certificate revocation lists (CRLs) configured on the device.
Options
none—Display basic information about all CRLs.
brief|detail—(Optional) Display the specified level of output.ca-profileca-profile-name-(Optional) Display information about only the specified CA profile.
Required Privilege Level
view
Output Fields
Table 1 lists the output
fields for the show security pki crl command. Output fields
are listed in the approximate order in which they appear.
Field Name |
Field Description |
|---|---|
|
Name of the configured CA profile. |
|
Revision number of the certificate revocation list. |
|
Authority that issued the digital certificate, including details of the authority organized using the distinguished name format. Possible subfields are:
|
|
Date and time the certificate revocation list becomes valid. |
|
Date and time the routing platform will download the latest version of the certificate revocation list. |
|
List of digital certificates that have been revoked before their expiration date. Values are:
|
Sample Output
show security pki crl ca-profile ca2
user@host> show security pki crl ca-profile ca2 CA profile: ca2 CRL version: V00000001 CRL issuer: emailAddress = user@example.net, C = US, ST = ca, L = sunnyvale, O = , OU = SPG QA, CN = 2000-spg-example-net Effective date: 04-26-2007 18:47 Next update: 05- 4-2007 07:07
Sample Output
show security pki crl ca-profile ca2 brief
user@host> show security pki crl ca-profile ca2 brief CA profile: ca2 CRL version: V00000001 CRL issuer: emailAddress = user@example.net, C = US, ST = ca, L = sunnyvale, O = example networks, OU = SPG QA, CN = 2000-spg-example-net Effective date: 04-26-2007 18:47 Next update: 05- 4-2007 07:07
Sample Output
show security pki crl ca-profile ca2 detail
user@host> show security pki crl ca-profile ca2 detail
CA profile: ca2
CRL version: V00000001
CRL issuer: emailAddress = user@example.net, C = US, ST = ca, L = sunnyvale, O = example, OU = SPG QA, CN = 2000-spg-example-net
Effective date: 04-26-2007 18:47
Next update: 05- 4-2007 07:07
Revocation List:
Serial number Revocation date
174e6399000000000506 03-16-2007 23:09
174ef3f3000000000507 03-16-2007 23:09
17529cd6000000000508 03-16-2007 23:09
1763ac26000000000509 03-16-2007 23:09
21904e5700000000050a 03-16-2007 23:09
2191cf7900000000050b 03-16-2007 23:09
21f10eb600000000050c 03-16-2007 23:09
2253ca2a00000000050f 03-16-2007 23:09
2478939b000000000515 03-16-2007 23:09
24f35004000000000516 03-16-2007 23:09
277ddfa8000000000517 03-16-2007 23:09
277e97bd000000000518 03-16-2007 23:09
27846a76000000000519 03-16-2007 23:09
2785176f00000000051a 03-16-2007 23:09
Release Information
Command modified in Junos OS Release 8.5.