display pki crl (user view)

Function

The display pki crl command displays the CRLs on LPUs.

Format

display pki crl [ realm realm-name ] logic-spu

display pki crl [ realm realm-name ] slot slot-id cpu cpu-id

Parameters

Parameter	Description	Value
realm realm-name	Displays information about the CRLs in the specified PKI realm.	The PKI realm name must already exist.
logic-spu	Indicates the logic SPU.	-
slot slot-id	Specifies the slot ID. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.	The value is an integer and depends on the device configuration.
cpu cpu-id	Specify the CPU ID. Only the USG6635E/6655E, USG6680E and USG6712E/6716E support this parameter.	The value is an integer and depends on the device configuration.

Views

User view

Default Level

3: Management level

Usage Guidelines

To view the CRLs on LPUs, run this command.

Example

# Display all CRLs on LPUs.

<sysname> display pki crl logic-spu
                                        
Certificate Revocation List (CRL):                                              
        Version 1 (0x0)                                                         
    Signature Algorithm: md5WithRSAEncryption                                   
        Issuer: /O=British Telecommunications plc/OU=BT Trustwise - Class 1 Indi
vidual CA                                                                       
        Last Update: Apr 19 19:58:16 2006 GMT                                   
        Next Update: Apr 18 19:58:16 2016 GMT                                   
Revoked Certificates:                                                           
    Serial Number: 02F745B42BC7C30F16F832E569D3CF6A                             
        Revocation Date: Aug  7 14:27:53 2002 GMT                               
    Serial Number: 32FE33F25F62F02CDD029E171E42E0BC                             
        Revocation Date: Jul 18 15:44:13 2002 GMT                               
    Serial Number: 5404A589DF5DCBF41A53191856F42837                             
        Revocation Date: Aug  3 16:58:43 2002 GMT                               
    Serial Number: 56A49694AB4EED49313678C6E885D8ED                             
        Revocation Date: Jul 21 13:33:35 2002 GMT                               
    Serial Number: 5B7AC558B2B7D121BBAC31C50720ADE8                             
        Revocation Date: Aug 13 13:48:40 2002 GMT                               
    Signature Algorithm: md5WithRSAEncryption                                   
         3e:7f:7c:9d:eb:bc:5e:bc:fa:3d:97:9a:ee:6a:ea:84:77:e7:                 
         5c:d2:4d:58:6f:51:91:11:b7:67:bb:01:cb:29:2d:13:b0:cb:                 
         7a:93:26:32:d2:50:15:4d:5e:ea:7d:83:65:cf:50:21:70:ce:                 
         af:83:d7:b0:27:f1:fd:0a:c2:e3:21:9c:fb:46:79:3b:b4:26:                 
         fc:5b:38:3e:71:eb:7f:4b:f3:87:7d:8c:5b:c5:ad:29:9c:74:                 
         56:e2:75:a4:41:58:ee:af:5e:bb:43:2c:70:4d:e9:47:1a:ef:                 
         06:d2:ab:ec:a7:44:ac:64:53:b5:79:d5:87:31:65:c0:df:bf:                 
         1d:7a                                                                  
                                                                                
Pki realm name: -                                                               
CRL file name: test.crl

**Table 1** Description of the **display pki crl** command output
Item	Description
Certificate Revocation List (CRL)	Information about the CRL.
Signature Algorithm	Algorithm of signature.
Issuer	Issuer information.
Last Update	Last time the CRL has been updated.
Next Update	Next time the CRL will be updated.
CRL extensions	CRL extended attribute.
X509v3 CRL Number	X.509v3 CRL number.
Revoked Certificates	Certificate that is revoked.
Serial Number	Serial number of the revoked certificate.
Revocation Date	Date when the certificate was revoked.
Signature Algorithm	Signature algorithm.
Pki realm name	PKI realm name.
CRL file name	CRL file name.