cfssl/doc/api/endpoint_revoke.txt

THE REVOKE ENDPOINT

Endpoint: /api/v1/cfssl/revoke
Method:   POST

Required parameters:

    * serial: a string specifying the serial number of a certificate in decimal format
    * authority_key_id: a string specifying the authority key identifier
      of the certificate to be revoked; this is used to distinguish
      which private key was used to sign the certificate. Should be formatted without colons and all lowercase.
    * reason: a string identifying why the certificate was revoked; see,
      for example, ReasonStringToCode in the ocsp package or section
      4.2.1.13 of RFC 5280. The "reasons" used here are the ReasonFlag
      names in said RFC.

Result:

    The returned result is an empty JSON object

Example:

    $ curl -d '{"serial": "7961067322630364137",        \
            "authority_key_id": "a0b1c2d3e4f5",              \
            "reason": "superseded"}'                    \
          ${CFSSL_HOST}/api/v1/cfssl/revoke