http://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml list lack's gpg key as 0x4EA4FF31, but the key was revoked: $ gpg --edit-key 0x4E952AE8 q gpg (GnuPG) 2.0.19; Copyright (C) 2012 Free Software Foundation, Inc. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. The following key was revoked on 2011-05-10 by DSA key 7A5597A24E952AE8 Jim Ramsay <i.am@jimramsay.com> pub 1024D/7A5597A24E952AE8 created: 2004-02-16 revoked: 2011-05-10 usage: SC trust: unknown validity: revoked The following key was revoked on 2011-05-10 by DSA key 7A5597A24E952AE8 Jim Ramsay <i.am@jimramsay.com> sub 1024g/381E252CCCBD3360 created: 2004-02-16 revoked: 2011-05-10 usage: E [ revoked] (1). Jim Ramsay <i.am@jimramsay.com> [ revoked] (2) Jim Ramsay <jim.ramsay@gmail.com> [ revoked] (3) Jim Ramsay (Gentoo dev) <lack@gentoo.org> [ revoked] (4) Jim Ramsay (at work) <jim_ramsay@dell.com> [ revoked] (5) Jim Ramsay (at work) <ramsay@sedsystems.ca> [ revoked] (6) Jim Ramsay (at work) <jim.ramsay@motorola.com> The other key 0xa7bd30d385cb62e5 (2011-05-09) which is also listed on the list, is valid.
*** Bug 413205 has been marked as a duplicate of this bug. ***
(In reply to comment #0) s/0x4EA4FF31/0x4E952AE8
Thanks for noticing this! I intentionally revoked my old key, but had not yet removed the key from the Gentoo LDAP servers. I have now removed the 'gpgkey' and 'gpgfingerprint' entries for the old key. I believe when the roll-call list is updated next, the revoked key will disappear from the listing. The new key is valid: 0x85CB62E5, fingerprint 189B C4BF 734D 674D D951 EA27 A7BD 30D3 85CB 62E5