Root CAs can't meaningfully be revoked. If one is compromised, it needs to be removed from clients.