[
  {
    "description": "round-trip: user-identity revocation (compromise)",
    "expected_parse_reason_code": 1,
    "expected_parse_subject": "alice@example.com",
    "expected_wire_hex": "763d646d70313b743d7265766f636174696f6e3b52453151556c59774d51455259577870593256415a586868625842735a53356a6232335353463931694d63614b6e4e336c376e6171442f41643242547938686e586a442f4451524e353063474341454141414141634e7659674d596673624848446c6c344478682b45716336676934706562724c7238596351666161635237344c4e784c4c7331344343774431376962417656546a33474a793559484942442f2b67305a66526b6a2b4e67464867383d",
    "inputs": {
      "reason_code": 1,
      "revoked_spk_hex": "d2485f7588c71a2a737797b9daa83fc0776053cbc8675e30ff0d044de7470608",
      "subject": "alice@example.com",
      "subject_type": 1,
      "ts": 1893456000
    },
    "revoked_seed_hex": "8b7e544bfacbe7c879ddb8a90d4a052358488153d2fa2082a110ca403b7755c1",
    "verify_with_now": 1893456060
  },
  {
    "description": "round-trip: cluster-operator revocation (routine)",
    "expected_parse_reason_code": 2,
    "expected_parse_subject": "mesh.example.com",
    "expected_wire_hex": "763d646d70313b743d7265766f636174696f6e3b52453151556c59774d5149516257567a6143356c654746746347786c4c6d4e7662655731465942576f392b31526f59387870614b61324835512b31794274477931756568695378334972655241674141414142773239694163566944774330732b4d4e444c6e3478486d4573586d346a56323046785251304f774f63666d64486b686f426a365346454d43427441424c6f524d7a4a7a73715a44574f485761556a6870436761506e4978524a42513d3d",
    "inputs": {
      "reason_code": 2,
      "revoked_spk_hex": "e5b5158056a3dfb546863cc6968a6b61f943ed7206d1b2d6e7a1892c7722b791",
      "subject": "mesh.example.com",
      "subject_type": 2,
      "ts": 1893456000
    },
    "revoked_seed_hex": "18e630d639e35fb08a7c463cefd96d07d53c60f5ecf3bdc418bd7898337da1d9",
    "verify_with_now": 1893456060
  },
  {
    "description": "signature/binding failure: wrong expected_revoked_spk",
    "expected_parse_result": "none",
    "expected_wire_hex": "763d646d70313b743d7265766f636174696f6e3b52453151556c59774d51455259577870593256415a586868625842735a53356a6232335353463931694d63614b6e4e336c376e6171442f41643242547938686e586a442f4451524e353063474341454141414141634e7659674d596673624848446c6c344478682b45716336676934706562724c7238596351666161635237344c4e784c4c7331344343774431376962417656546a33474a793559484942442f2b67305a66526b6a2b4e67464867383d",
    "revoked_seed_hex": "8b7e544bfacbe7c879ddb8a90d4a052358488153d2fa2082a110ca403b7755c1",
    "verify_with_expected_revoked_spk_hex": "0c630db0cd7343b0b66c4e6e7770a24f85319166f6b5992951e7a6bc20fa5ab0",
    "verify_with_now": 1893456060,
    "wire_from_case": 0
  },
  {
    "description": "stale-with-explicit-cap: revocation rejected only when the caller opts in to max_age_seconds",
    "expected_parse_result": "none",
    "expected_wire_hex": "763d646d70313b743d7265766f636174696f6e3b52453151556c59774d51455259577870593256415a586868625842735a53356a6232335353463931694d63614b6e4e336c376e6171442f41643242547938686e586a442f4451524e353063474341454141414141634e7659674d596673624848446c6c344478682b45716336676934706562724c7238596351666161635237344c4e784c4c7331344343774431376962417656546a33474a793559484942442f2b67305a66526b6a2b4e67464867383d",
    "inputs": {
      "reason_code": 1,
      "revoked_spk_hex": "d2485f7588c71a2a737797b9daa83fc0776053cbc8675e30ff0d044de7470608",
      "subject": "alice@example.com",
      "subject_type": 1,
      "ts": 1893456000
    },
    "notes": "Permanent-assertion model: the default max_age_seconds=None accepts this same wire. The rejection here requires the explicit cap in verify_with_max_age_seconds.",
    "revoked_seed_hex": "8b7e544bfacbe7c879ddb8a90d4a052358488153d2fa2082a110ca403b7755c1",
    "verify_with_max_age_seconds": 31536000,
    "verify_with_now": 1956528000
  }
]