Alibaba Cloud DNS:RevokeAtiAgentRegisterInfo

Ensures the idempotency of the request. Generate a parameter value from your client that is unique across different requests. ClientToken supports only ASCII characters and cannot exceed 64 characters in length.

The Agent registration ID. This ID is automatically generated by the Alibaba Cloud ATS platform and is globally unique within the platform. It is automatically generated during the Agent registration process. This ID must be included throughout the API registration and query processes. Call the ListAtiAgentRegisterInfos operation to query the target Agent and obtain the AgentRegisterInfoId from the response.

The reason for unregistration. Valid values:

• Key compromise

• CA key compromise

• Affiliation changed

• Certificate superseded

• Cessation of operation

• Certificate hold

• Remove from CRL

• Privilege withdrawn

• AA compromise

• Unspecified

The revocation reason code as defined in RFC 5280. Valid values:

• unspecified: Unspecified. Default value. Used when the CA does not provide a specific reason or the reason is unknown. This is the most common code.

• keyCompromise: Key compromise. The private key may have been obtained by an unauthorized party. This is the most severe reason and typically means the certificate must be revoked immediately and cannot be recovered.

• cACompromise: CA key compromise. The private key of the CA that issued the certificate has been compromised. This affects all certificates issued by the CA and typically results in the revocation of the entire subtree.

• affiliationChanged: Affiliation changed. The identity information of the certificate holder (such as name or organization name) has changed, but the public key remains valid. For example, an employee leaves the company or the company is renamed.

• superseded: Certificate superseded. The certificate holder has applied for a new certificate (such as key rotation or algorithm upgrade), and the old certificate is revoked. The old key has not been compromised.

• cessationOfOperation: Cessation of operation. The certificate holder no longer uses the key for related operations (such as server decommissioning or service termination). The key has not been compromised.

• certificateHold: Certificate hold. Temporary revocation. Typically used for investigating suspicious activities or for administrative reasons. The hold can be removed later (Unhold) to make the certificate valid again. Note: This code cannot be used for final revocation.

• removeFromCRL: Remove from CRL. Used only for delta CRLs (incremental revocation lists). Indicates that a certificate previously held by certificateHold has been released and should be removed from the revocation list. This is not a revocation reason but a status update instruction.

• privilegeWithdrawn: Privilege withdrawn. The privileges or attributes granted in the certificate have been revoked (primarily used for Attribute Certificates and rarely for regular SSL/TLS certificates).

• aACompromise: AA compromise. The key of the AA (Attribute Authority) that issued the attribute certificate has been compromised. This is also primarily used in the attribute certificate system.