NAME

       userid - Revoke a User ID

SYNOPSIS

       userid  [--certificate]  [--revocation-key] [--private-key-store] [-t|--time] [--notation]
       [-B|--binary] [-h|--help] <USERID> <REASON> <MESSAGE>

DESCRIPTION

       Revokes a User ID

       Creates a revocation certificate for a User ID.

       If "--revocation-key" is provided, then that key is used to create the signature.  If that
       key  is  different  from  the  certificate  being  revoked,  this  creates  a  third-party
       revocation.  This is normally only useful if the owner of the certificate  designated  the
       key to be a designated revoker.

       If   "--revocation-key"   is   not   provided,   then   the  certificate  must  include  a
       certification-capable key.

OPTIONS

       --certificate=FILE
              Reads the certificate to revoke from FILE or stdin, if omitted.  It is an error for
              the file to contain more than one certificate.

       --revocation-key=KEY
              Signs  the  revocation  certificate  using  KEY.   If the key is different from the
              certificate, this  creates  a  third-party  revocation.   If  this  option  is  not
              provided,  and  the certificate includes secret key material, then that key is used
              to sign the revocation certificate.

       --private-key-store=KEY_STORE
              Provides parameters for private key store

       -t, --time=TIME
              Chooses keys valid at the specified time  and  sets  the  revocation  certificate's
              creation time

       --notation=NAME VALUE
              Adds  a  notation  to the certification.  A user-defined notation's name must be of
              the form "name@a.domain.you.control.org". If the notation's name starts with  a  !,
              then  the  notation  is  marked  as  being  critical.  If a consumer of a signature
              doesn't understand a critical notation, then it will  ignore  the  signature.   The
              notation is marked as being human readable.

       -B, --binary
              Emits binary data

       -h, --help
              Print help information

       <USERID>
              The  User ID to revoke.  By default, this must exactly match a self-signed User ID.
              Use --force to generate a revocation certificate for a User ID, which is  not  self
              signed.

       <REASON>
              The reason for the revocation.  This must be either: retired, or unspecified:

                - retired means that this User ID is no longer valid.  This is
                  appropriate when someone leaves an organisation, and the
                  organisation does not have their secret key material.  For
                  instance, if someone was part of Debian and retires, they would
                  use this to indicate that a Debian-specific User ID is no longer
                  valid.

                - unspecified means that a different reason applies.

              If  the  reason  happened  in  the  past,  you should specify that using the --time
              argument.  This allows OpenPGP implementations  to  more  accurately  reason  about
              objects whose validity depends on the validity of a User ID.

       <MESSAGE>
              A  short, explanatory text that is shown to a viewer of the revocation certificate.
              It explains why the certificate has been  revoked.   For  instance,  if  Alice  has
              created a new key, she would generate a 'superseded' revocation certificate for her
              old  key,  and  might  include  the  message  "I've  created  a  new   certificate,
              FINGERPRINT, please use that in the future."

SEE ALSO

       For the full documentation see <https://docs.sequoia-pgp.org/sq/>.

       sq(1)  sq-armor(1) sq-autocrypt(1) sq-certify(1) sq-dearmor(1) sq-decrypt(1) sq-encrypt(1)
       sq-inspect(1)   sq-key(1)   sq-keyring(1)   sq-keyserver(1)   sq-packet(1)    sq-revoke(1)
       sq-revoke-certificate(1) sq-revoke-subkey(1) sq-sign(1) sq-verify(1) sq-wkd(1)