dnssec-revoke(8) on Linux
The text d756c44be23a, as Debian 10 (Buster) shipped it.
set the REVOKED bit on a DNSSEC key
Flags it lists
-
-E -
-K -
-R -
-V -
-f -
-h -
-r -
-v