I’m pretty sure you can just go ahead authorize your new core, the old core is then automatically deauthorized. Hopefully you didn’t unwittingly “gift” the new owner terabytes of music files.
I think the update to Roon 1.8 (today) will force a new login on your new device, which will deauthorize your old core as well. If you do not want to update, @mikeb gave solid advice.