Since Hyperledger Fabric is a PKI system, identities that must be removed from the system have to be explicitly revoked. This is done through standard certificate revocation lists (CRLs). The CRLs need to be synchronized across all organizations to ensure that everyone detects the revoked certificate. The distribution of CRLs to other peers requires out of band mechanisms.