dnssec-revoke(8) on Linux
The text 85e29ea53c4f, as Debian 9 (Stretch) shipped it.
Set the REVOKED bit on a DNSSEC key
Flags it lists
-
-E -
-K -
-R -
-V -
-f -
-h -
-r -
-v