openssl  crl [-inform PEM|DER] [-outform PEM|DER] [-text] [-in filename] [-out filename] [-hash] [-fingerprint] [-issuer ] [-lastupdate ] [-nextupdate ] [-crlnumber] [-noout ] [-CAfile file ] [-CApath dir ] [-nameopt arg] [-verify]

-inform arg     - input format - default PEM (DER or PEM)

 -outform arg    - output format - default PEM

 -text           - print out a text format version

 -in arg         - input file - default stdin

 -out arg        - output file - default stdout

 -hash           - print hash value

 -fingerprint    - print the crl fingerprint

 -issuer         - print issuer DN

 -lastupdate     - lastUpdate field

 -nextupdate     - nextUpdate field

 -crlnumber      - print CRL number

 -noout          - no CRL output

 -CAfile  name   - verify CRL using certificates in file "name"

 -CApath  dir    - verify CRL using certificates in "dir"

 -nameopt arg    - various certificate name options

openssl crl -in crl.crl  -CAfile demoCA/cacert.pem -noout

openssl crl -in crl.crl -outform DER -out crl.der

openssl crl -in crl.crl -text -issuer -hash -lastupdate -nextupdate

参考：http://blog.csdn.net/as3luyuan123/article/details/13706827