“Essentially, ICANN has been built to ensure that the Internet works, not for its coordination role to be used to stop it from working.”
Ukraine asked ICANN to revoke .ru, kill the SSL certificates under it and shut down root servers in Russia. ICANN said no in two pages. It could not revoke the certificates anyway, because it never issued them. The refusal is right. The moment one government can get a country unplugged, every government will ask.