Update: properly blocked now. Seems like it takes a few hours (days?) for the CRL update to propagate.