The RFC allows a self-signed revoke and as the help says --privkey (-p) path/to/key.pem Use specified private key instead of account key (useful for revocation) I expected this feature is supported.

When I run dehydrated --revoke cert.pem --privkey key.pem the script tries to fetch the account id from the server for the used certificate key which fails for obvious reasons.