The root CA should have been revoked then.