Revoke needs access to private key like pgp does. If subkeys were used and the original private key stored offline you could create a revocation request. I don't know if this is on roadmap.