dnssec-revoke(1) on Linux
The text 6467be509d86, as Debian 12 (Bookworm) shipped it.
set the REVOKED bit on a DNSSEC key
Flags it lists
-
-E -
-K -
-R -
-V -
-f -
-h -
-r -
-v