Share via

Sample Revocation List

  • Article

The following XML example shows a sample revocation list. Do not try to use this list because the signature is not valid, and the entries are for example purposes only.

<?xml version='1.0' ?>
<XrML xml:space="preserve" version="1.2">
 <BODY type="LICENSE" version="3.0">
  <ISSUEDTIME>2003-04-14T06:51</ISSUEDTIME>
  <DESCRIPTOR>
   <OBJECT type="Revocation-List">
    <ID type="MS-GUID">{aecfd75e-eefd-48bb-a5ef-de8931a7249a}</ID>
   </OBJECT>
  </DESCRIPTOR>
  <ISSUER>
   <OBJECT type="Corporation">
    <ID type="MS-GUID">{11111111-1111-1111-1111-111111111111}</ID>
    <NAME>Microsoft Corporation</NAME>
    <ADDRESS type="URL">https://www.microsoft.com</ADDRESS>
   </OBJECT>
   <PUBLICKEY>
    <ALGORITHM>RSA</ALGORITHM>
    <PARAMETER name="public-exponent">
     <VALUE encoding="integer32">65537</VALUE>
    </PARAMETER>
    <PARAMETER name="modulus">
     <VALUE encoding="base64" size="2048">N2HDQdjSBo5WflYENZTgvTIbATr1jw8DslmHyRrzR4Zufw1vPoGq5LyX4wJDsAycItVo6fp6Q85JZ0ObVCHP7/Rv7kJjw+MHRYmhBL/YVSRyPlDcNi9iOVsBBSWmAy/je5NxKAiuD+xFpCe6hwILgxVAX41QRkvHFtf62HsRLYyEKSYAvhD65h17oo386T6RB09BFnr1yfC4L5n8r6GcViJYQQJPtlgbyUmoKV3dOPSPFEXIy9EYmoZfTwaseKp6k4VFvaFhGD40vZ/gpALDvRS87X6yDZUsMjCRISQYWLD3oEu2kw2DJUrRbyQOUSHgri7WkACLzLRWDgH6rlY+zg==</VALUE>
    </PARAMETER>
   </PUBLICKEY>
  </ISSUER> 
<!-- Not a valid revocation list. For example use only  -->
<REVOCATIONLIST>
 <REVOKE category="license" type="license-id">
  <OBJECT>
     <ID type="MS-GUID">EUL{06BCB94D-43E5-419f-B180-AA9FD321ED7A}</ID>
  </OBJECT>
 </REVOKE>
  <REVOKE category="license" type="license-hash">
   <DIGEST>
    <ALGORITHM>SHA1</ALGORITHM>
    <VALUE encoding="base64" size="160">ABfB4mcEslVCMEZR9reACqXHCoQ=</VALUE>
   </DIGEST>
  </REVOKE>
  <REVOKE category="license" type="issuer-key">
   <PUBLICKEY>
    <ALGORITHM>RSA</ALGORITHM>
    <PARAMETER name="public-exponent">
     <VALUE encoding="integer32">65537</VALUE>
    </PARAMETER>
    <PARAMETER name="modulus">
     <VALUE encoding="base64" size="512">AzJOVjpA8PgPfTv/2ej2/Bq8AkExlvfMYHRqo9q/F2b/nwNIlnbi+NctDGCjl55O+JoL07pnHaQSmx4v/s5FwA==</VALUE>
    </PARAMETER>
   </PUBLICKEY>
  </REVOKE>
  <REVOKE category="license" type="issuer-id">
   <OBJECT>
    <ID type="ascii-tag">Contoso, Inc.</ID>
   </OBJECT>
  </REVOKE>
  <REVOKE category="content" type="content-id">
   <OBJECT>
    <ID type="ascii-tag">July 2003 Subscriber List</ID>
   </OBJECT>
  </REVOKE>
  <REVOKE category="principal" type="principal-id">
   <OBJECT>
    <ID type="MS-PassportID">Compromised_source@lucernepublishing.com</ID>
   </OBJECT>
  </REVOKE>
  <REVOKE category="principal" type="principal-key">
   <PUBLICKEY>
    <ALGORITHM>RSA</ALGORITHM>
    <PARAMETER name="public-exponent">
     <VALUE encoding="integer32">65537</VALUE>
    </PARAMETER>
    <PARAMETER name="modulus">
     <VALUE encoding="base64" size="512">AZjDDjpA8PgPfTv/2ej2/Bq8AkExlvfMYHRqo9q/F2b/nwNIlnbi+NctDGCjl55O+JoL07pnHaQSmx4v/s5FwA==</VALUE>
    </PARAMETER>
   </PUBLICKEY>
  </REVOKE>
 </REVOCATIONLIST>
 </BODY>
 <SIGNATURE>
  <ALGORITHM>RSA PKCS#1-V1.5</ALGORITHM>
  <DIGEST>
   <ALGORITHM>SHA1</ALGORITHM>
  </DIGEST>
  <VALUE encoding="base64" size="2048">muJqpqg2JZafdfD4yfP+xcSH/Oh0GP3iwH2DO9aRWKa866C9XEeSLkycJPbl8NUfTPJDY1l0b7LsqqXteLLm3lfB7K0KKQzz8i3qRBd8ydC9dbxYuvGUJapviI61EvgZzKRP491FUQC244dpOlTIgRMuSBR8RSksy0mu5FwXpOMzj8wKKqvzjCehNStLh8bJ/O5Tn6XMvrbNSiHUDWUG6/ES1OrMd9BDrJRQUlkGYnpZhaOG1Rr38ZolyajOFMqE19EFTxG5UzoUkcjtKzg3Lrxw0uLxyUgs8SMRGbYXCNpc1LG5UQGDUFQaHqEWIUaRO3iiIkP358x7v5hxQIUjcA==</VALUE>
 </SIGNATURE>
</XrML>

For more information about how to build revocation lists, see Registering Revocation Lists and the Active Directory Rights Management Services deployment guide, which comes with Rights Management Services.

Send comments about this topic to Microsoft

Build date: 3/13/2008