> If the certificate is being misused, I think it should be revoked by the authority who approved it.

That's the problem. There is no "authority who approved it", beyond the Russian government agency that created the certificate. The certificate is self-signed, and users are being asked to install it manually.