signingCredential.ocsp.revoked
Supplied revocationRevocation: Cancelling a certificate before it expires, for example after a key leak. Checkers then reject its signatures unless a trusted timestamp shows they came first. evidence marks the signer as revoked.
This check failed.
What to do
Reject the signature. Revocation evidence from the issuer shows the signer's certificate was revoked.
What the signer trust cover
Whether the checker trusts the signer. The certificate chainCertificate chain: The links from a signer's certificate up to a root authority a checker already trusts. has to end at a source the checker trusts, and must not be revoked.
Check a file yourself
Install the open-source Encypher C2PAC2PA: The Coalition for Content Provenance and Authenticity: the group that publishes the open standard for content labels. command-line tool. It runs on your machine and reports these codes for any supported file format.
cargo install encypher-c2pa-cliCreate. Mark. Endure.
The Encypher APIAPI: Application programming interface: a way for one program to ask another to do a job, such as sign a file. returns these codes over HTTP, so your product can act on them.