show key expiry status similar to revocation