gpg --output rev_cert_filename.asc --gen-revoke keyname where rev_cert_filename.asc is the filename you'd like the certificate to have (just make sure it ends in .asc) and keyname is the key's ID ...