display pki crl filename

Function

The display pki crl filename command displays the CRL content of the specified file name.

Format

display pki crl filename file-name

Parameters

Parameter Description Value
filename file-name

Specifies the name of the certificate file.

It is a string of 1 to 63 characters.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name Operations
pki read

Usage Guidelines

Usage Scenario

Before using the display pki crl filename command, ensure that the CRL is no larger than 1 MB.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display the content of CRL crl.crl.
<HUAWEI> display pki crl filename crl.crl
Certificate Revocation List (CRL):                                              
        Version 2 (0x1)                                                         
        Signature Algorithm: XXXEncryption                              
        Issuer: CN=ROOT_CA                                                      
        Last Update: Apr  6 06:16:38 2010 GMT                                   
        Next Update: Apr 13 18:36:38 2010 GMT                                   
        CRL extensions:                                                         
            X509v3 Authority Key Identifier:                                    
                keyid:7A:E2:CF:A1:10:8B:E7:A2:2F:67:7D:74:A1:13:F0:18:AA:53:EF:B1
            1.3.6.1.4.1.311.21.1:                                               
                ...                                                             
            X509v3 CRL Number:                                                  
                4                                                               
            1.3.6.1.4.1.311.21.4:                                               
                100413062638Z   .                                                               
            1.3.6.1.4.1.311.21.14:                                              
                0..0...........ldap:///CN=ROOT_CA,CN=2003zh,CN=CDP,CN=Public%20K
ey%20Services,CN=Services,DC=UnavailableConfigDN?certificateRevocationList?base?
objectClass=cRLDistributionPoint                                                
Revoked Certificates:                                                           
    Serial Number: 61F14A1400000000000A                                         
        Revocation Date: Apr  6 06:26:16 2010 GMT                               
        CRL entry extensions:                                                   
            X509v3 CRL Reason Code:                                             
                Cessation Of Operation                                          
    Serial Number: 61E1750A000000000009                                         
        Revocation Date: Apr  6 06:26:16 2010 GMT                               
        CRL entry extensions:                                                   
            X509v3 CRL Reason Code:                                             
                Cessation Of Operation                                          
    Serial Number: 616A2D65000000000008                                         
        Revocation Date: Apr  6 06:26:16 2010 GMT                               
        CRL entry extensions:                                                   
            X509v3 CRL Reason Code:                                             
                Cessation Of Operation                                          
    Serial Number: 6120DD35000000000007                                         
        Revocation Date: Apr  6 06:26:16 2010 GMT                               
        CRL entry extensions:                                                   
            X509v3 CRL Reason Code:                                             
                Cessation Of Operation                                          
    Serial Number: 6106BECE000000000006                                         
        Revocation Date: Apr  6 06:26:16 2010 GMT                               
        CRL entry extensions:                                                   
            X509v3 CRL Reason Code:                                             
                Cessation Of Operation                                          
    Serial Number: 6106A78D000000000005                                         
        Revocation Date: Apr  6 06:26:16 2010 GMT                               
        CRL entry extensions:                                                   
            X509v3 CRL Reason Code:                                             
                Cessation Of Operation                                          
    Serial Number: 114EDC6D000000000004                                         
        Revocation Date: Apr  6 06:26:16 2010 GMT                               
        CRL entry extensions:                                                   
            X509v3 CRL Reason Code:                                             
                Cessation Of Operation                                          
    Serial Number: 615DEB07000000000003                                         
        Revocation Date: Apr  6 06:26:16 2010 GMT                               
        CRL entry extensions:                                                   
            X509v3 CRL Reason Code:                                             
                Cessation Of Operation                                          
    Serial Number: 61411D30000000000002                                         
        Revocation Date: Apr  6 06:26:15 2010 GMT                               
        CRL entry extensions:                                                   
            X509v3 CRL Reason Code:                                             
                Cessation Of Operation                                          
    Signature Algorithm: XXXEncryption                                  
        10:8f:9b:02:cb:e6:6e:e0:d3:79:2d:0e:21:22:45:ac:7a:56:                  
        eb:92:31:4f:c7:19:fe:eb:c0:7c:ee:a2:e5:8a:6f:82:19:5c:                  
        80:12:ba:3f:d6:e8:12:51:87:5c:d3:4d:83:db:6d:cc:33:e0:                  
        84:c6:fe:71:a0:7b:15:75:e1:e8:75:2d:05:73:ec:97:30:55:                  
        44:26:bf:96:28:e2:bb:82:9d:67:31:4c:d6:c3:5a:5d:0f:05:                  
        2f:cf:e9:10:64:50:96:d1:41:b9:cf:71:67:b4:7e:f4:92:ec:                  
        b8:05:36:0d:79:eb:90:e8:21:a0:43:4c:a1:82:a7:61:a3:6a:                  
        63:1b:c7:b5:9e:89:0a:a8:1b:7b:5e:33:25:cd:9e:fa:a0:7a:                  
        83:da:3a:1e:b4:f4:81:70:59:9a:47:3f:a1:6f:54:f8:ea:e8:                  
        fe:d8:ec:7f:11:6f:a7:f0:94:62:29:2a:00:93:19:cf:31:9f:                  
        a8:d0:ec:da:5f:5f:1d:87:d7:4e:51:85:95:e7:ea:35:94:77:                  
        c9:09:2e:bd:89:34:ec:5f:23:ea:04:ef:7a:a1:c8:c4:d0:12:                  
        22:79:4a:eb:3a:f9:df:7b:93:89:7d:be:22:c3:a9:b8:2c:88:                  
        4c:73:3d:c3:44:ca:7f:98:e5:35:ad:9b:71:98:23:14:6c:25:                  
        a1:60:8b:d2
Table 1 Description of the display pki crl filename command output
Item Description
Certificate Revocation List (CRL)

Indicates the CRL information.

Revocation Date

Indicates the revocation time.

Last Update

Indicates the last update time.

Next Update

Indicates the next update time.

CRL extensions

Indicates CRL extensions.

CRL entry extensions

Indicates CRL entry extensions.

X509v3 Authority Key Identifier

Indicates the X.509v3 authority key identifier.

X509v3 CRL Number

Indicates the X.509v3 CRL number.

X509v3 CRL Reason Code

Indicates the code for the revocation cause.

Revoked Certificates

Indicates the revoked certificate.

Serial Number

Indicates the CRL serial number.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >