Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show security pki crl (View)

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show security pki crl
                    <                  brief                     |                   detail>
<ca-profile            ca-profile-name         >

Description

Display information about the certificate revocation lists (CRLs) configured on the device.

Options

  • none—Display basic information about all CRLs.

  • brief | detail—(Optional) Display the specified level of output.

  • ca-profile ca-profile-name-(Optional) Display information about only the specified CA profile.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security pki crl command. Output fields are listed in the approximate order in which they appear.

Table 1: show security pki crl Output Fields

Field Name

Field Description

CA profile

Name of the configured CA profile.

CRL version

Revision number of the certificate revocation list.

CRL issuer

Authority that issued the digital certificate, including details of the authority organized using the distinguished name format. Possible subfields are:

  • emailAddress—Mail address of the issuing authority.

  • C—Country of origin.

  • ST—State of origin.

  • L—Locality of origin.

  • O—Organization of origin.

  • OU—Department within an organization.

  • CN—Name of the authority.

Effective date

Date and time the certificate revocation list becomes valid.

Next update

Date and time the routing platform will download the latest version of the certificate revocation list.

Revocation List

List of digital certificates that have been revoked before their expiration date. Values are:

  • Serial number—Unique serial number of the digital certificate.

  • Revocation date—Date and time that the digital certificate was revoked.

Sample Output

show security pki crl ca-profile ca2

content_copy zoom_out_map
user@host> show security pki crl ca-profile ca2             
CA profile: ca2
  CRL version: V00000001
  CRL issuer: emailAddress = user@example.net, C = US, ST = ca, L = sunnyvale, O = , OU = SPG QA, CN = 2000-spg-example-net
  Effective date: 04-26-2007 18:47
  Next update: 05- 4-2007 07:07

Sample Output

show security pki crl ca-profile ca2 brief

content_copy zoom_out_map
user@host> show security pki crl ca-profile ca2 brief             
CA profile: ca2
  CRL version: V00000001
  CRL issuer: emailAddress = user@example.net, C = US, ST = ca, L = sunnyvale, O = example networks, OU = SPG QA, CN = 2000-spg-example-net
  Effective date: 04-26-2007 18:47
  Next update: 05- 4-2007 07:07

Sample Output

show security pki crl ca-profile ca2 detail

content_copy zoom_out_map
user@host> show security pki crl ca-profile ca2 detail             
CA profile: ca2
  CRL version: V00000001
  CRL issuer: emailAddress = user@example.net, C = US, ST = ca, L = sunnyvale, O = example, OU = SPG QA, CN = 2000-spg-example-net
  Effective date: 04-26-2007 18:47
  Next update: 05- 4-2007 07:07
  Revocation List:
    Serial number              Revocation date
    174e6399000000000506       03-16-2007 23:09
    174ef3f3000000000507       03-16-2007 23:09
    17529cd6000000000508       03-16-2007 23:09
    1763ac26000000000509       03-16-2007 23:09
    21904e5700000000050a       03-16-2007 23:09
    2191cf7900000000050b       03-16-2007 23:09
    21f10eb600000000050c       03-16-2007 23:09
    2253ca2a00000000050f       03-16-2007 23:09
    2478939b000000000515       03-16-2007 23:09
    24f35004000000000516       03-16-2007 23:09
    277ddfa8000000000517       03-16-2007 23:09
    277e97bd000000000518       03-16-2007 23:09
    27846a76000000000519       03-16-2007 23:09
    2785176f00000000051a       03-16-2007 23:09

Release Information

Command modified in Junos OS Release 8.5.

footer-navigation