DNSSEC Debugger - dnssec.fail

Domain Name:

Time: 2024-05-13 02:03:38 UTC

Analyzing DNSSEC problems for dnssec.fail

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 12605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to e.root-servers.net for dnssec.fail/A
	Received 757 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 757 octets ;; HEADER SECTION ;; id = 61762 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fail. 172800 IN NS v0n0.nic.fail. fail. 172800 IN NS v0n1.nic.fail. fail. 172800 IN NS v0n2.nic.fail. fail. 172800 IN NS v0n3.nic.fail. fail. 172800 IN NS v2n0.nic.fail. fail. 172800 IN NS v2n1.nic.fail. fail. 86400 IN DS ( 55696 8 2 23599facbcf180ca8a276a70e5e407236cbfcc5c9b27ce00972cb83f99803577 ) fail. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . LRmef9e5b/m5VPVXzqQE2dy/6wY12JbZNRZr1oC2qPOb7qXD+eDl1I5nvytVso8Ehk4btnd5m2kh fVHmYaC/j/amIElLTeg/BlfyAQDBlcviLEfDN557fdJLefWO08uxOVEMzuM4CpJTkOWujVnt4DrH dIEUiqxFPn7wmzi9+LTsU6s1bQVrtF05AxgRW/+yofZS6FJJs7HxMRHuB6UwnRDcYnOXfitSCIxw HJnVviuVefMG4BweL6U2KSW2p5NliI8TRHtUmHWZLHSy6+ox8o9rsf3Zc0++96cIgdQbw4kh42b5 BCCNUPegqwmvXJIl0aR8uYajIJIS7LWzlwy+hA== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.fail. 172800 IN A 65.22.20.56 v0n1.nic.fail. 172800 IN A 65.22.21.56 v0n2.nic.fail. 172800 IN A 65.22.22.56 v0n3.nic.fail. 172800 IN A 161.232.10.56 v2n0.nic.fail. 172800 IN A 65.22.23.56 v2n1.nic.fail. 172800 IN A 161.232.11.56 v0n0.nic.fail. 172800 IN AAAA 2a01:8840:16::56 v0n1.nic.fail. 172800 IN AAAA 2a01:8840:17::56 v0n2.nic.fail. 172800 IN AAAA 2a01:8840:18::56 v0n3.nic.fail. 172800 IN AAAA 2a01:8840:f4::56 v2n0.nic.fail. 172800 IN AAAA 2a01:8840:19::56 v2n1.nic.fail. 172800 IN AAAA 2a01:8840:f5::56 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for fail/DNSKEY
	Received 750 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 750 octets ;; HEADER SECTION ;; id = 14173 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fail. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fail. 172800 IN NS v0n0.nic.fail. fail. 172800 IN NS v0n1.nic.fail. fail. 172800 IN NS v0n2.nic.fail. fail. 172800 IN NS v0n3.nic.fail. fail. 172800 IN NS v2n0.nic.fail. fail. 172800 IN NS v2n1.nic.fail. fail. 86400 IN DS ( 55696 8 2 23599facbcf180ca8a276a70e5e407236cbfcc5c9b27ce00972cb83f99803577 ) fail. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . LRmef9e5b/m5VPVXzqQE2dy/6wY12JbZNRZr1oC2qPOb7qXD+eDl1I5nvytVso8Ehk4btnd5m2kh fVHmYaC/j/amIElLTeg/BlfyAQDBlcviLEfDN557fdJLefWO08uxOVEMzuM4CpJTkOWujVnt4DrH dIEUiqxFPn7wmzi9+LTsU6s1bQVrtF05AxgRW/+yofZS6FJJs7HxMRHuB6UwnRDcYnOXfitSCIxw HJnVviuVefMG4BweL6U2KSW2p5NliI8TRHtUmHWZLHSy6+ox8o9rsf3Zc0++96cIgdQbw4kh42b5 BCCNUPegqwmvXJIl0aR8uYajIJIS7LWzlwy+hA== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.fail. 172800 IN A 65.22.20.56 v0n1.nic.fail. 172800 IN A 65.22.21.56 v0n2.nic.fail. 172800 IN A 65.22.22.56 v0n3.nic.fail. 172800 IN A 161.232.10.56 v2n0.nic.fail. 172800 IN A 65.22.23.56 v2n1.nic.fail. 172800 IN A 161.232.11.56 v0n0.nic.fail. 172800 IN AAAA 2a01:8840:16::56 v0n1.nic.fail. 172800 IN AAAA 2a01:8840:17::56 v0n2.nic.fail. 172800 IN AAAA 2a01:8840:18::56 v0n3.nic.fail. 172800 IN AAAA 2a01:8840:f4::56 v2n0.nic.fail. 172800 IN AAAA 2a01:8840:19::56 v2n1.nic.fail. 172800 IN AAAA 2a01:8840:f5::56 ;; { "EDNS-VERSION": 0 }
	Found child zone fail

fail

	Checking DS between . and fail
	Query to i.root-servers.net for fail/DS
	Received 368 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 368 octets ;; HEADER SECTION ;; id = 37600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fail. IN DS ;; ANSWER SECTION (2 records) fail. 86400 IN DS ( 55696 8 2 23599facbcf180ca8a276a70e5e407236cbfcc5c9b27ce00972cb83f99803577 ) fail. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . LRmef9e5b/m5VPVXzqQE2dy/6wY12JbZNRZr1oC2qPOb7qXD+eDl1I5nvytVso8Ehk4btnd5m2kh fVHmYaC/j/amIElLTeg/BlfyAQDBlcviLEfDN557fdJLefWO08uxOVEMzuM4CpJTkOWujVnt4DrH dIEUiqxFPn7wmzi9+LTsU6s1bQVrtF05AxgRW/+yofZS6FJJs7HxMRHuB6UwnRDcYnOXfitSCIxw HJnVviuVefMG4BweL6U2KSW2p5NliI8TRHtUmHWZLHSy6+ox8o9rsf3Zc0++96cIgdQbw4kh42b5 BCCNUPegqwmvXJIl0aR8uYajIJIS7LWzlwy+hA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for fail in the . zone
	DS=55696/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fail. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . LRmef9e5b/m5VPVXzqQE2dy/6wY12JbZNRZr1oC2qPOb7qXD+eDl1I5nvytVso8Ehk4btnd5m2kh fVHmYaC/j/amIElLTeg/BlfyAQDBlcviLEfDN557fdJLefWO08uxOVEMzuM4CpJTkOWujVnt4DrH dIEUiqxFPn7wmzi9+LTsU6s1bQVrtF05AxgRW/+yofZS6FJJs7HxMRHuB6UwnRDcYnOXfitSCIxw HJnVviuVefMG4BweL6U2KSW2p5NliI8TRHtUmHWZLHSy6+ox8o9rsf3Zc0++96cIgdQbw4kh42b5 BCCNUPegqwmvXJIl0aR8uYajIJIS7LWzlwy+hA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=55696/SHA-256 is now in the chain-of-trust
	`fail. 86400 IN DS ( 55696 8 2 23599facbcf180ca8a276a70e5e407236cbfcc5c9b27ce00972cb83f99803577 )`
	Query to v0n2.nic.fail for fail/DNSKEY
	Received 897 bytes from 65.22.22.56
	;; Response received from [65.22.22.56] 897 octets ;; HEADER SECTION ;; id = 54156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fail. IN DNSKEY ;; ANSWER SECTION (4 records) fail. 3600 IN DNSKEY ( 257 3 8 AwEAAcArwiE7q6ZtxsIeFwnNsMJz+BQ01HjGgURCL29DOKR6ei1nF+wW/g2XHqODr6CoyPbl0XkO xkQ2szZ49C8ytxi2opm/RygQ0zPcTFl1Vdm2jRmfa1pHSIg0rJjx7pbV6I6t7AnEYU8La4fhOjV5 l2OhzD09Uvucs9+4capi9qeRF8OEI73PUERYdnbX/pbMMpsyJ1C6EKIf9mmrzfGJ+Ecac2TUYJBi YnxCHRY7lZmN6nUzaOTjcoLvXZ4i8MQrcm+ixthQ1ypbKvwUeX/sxfnNATYL2dWOqAjDAMTXSrGZ 3HUB/ZF1/BV8cROC3ABC9a88SX8YR5kP1cxNtU5V7hU= ) ; Key ID = 55696 fail. 3600 IN DNSKEY ( 256 3 8 AwEAAal+3IC1yKRcO/7b/JlgRQ+ZvwRzd1mRnLPXg1lB3bFn3H7alC/ePIduaHy4TD8Th8ZDqViu P47fZsdwb7+Y4UnuYeLzVn70eotpwTY9euxlZZUw6wg5BEr4dd3YlOk8VSp+5S+dgZkwfqjyM9qJ pHqhU2j40hob+iHhV3LmUqB1 ) ; Key ID = 20109 fail. 3600 IN DNSKEY ( 256 3 8 AwEAAbxVCO2ttD2rMSjF080ubeG4+warQLzZgEX6blZ7MSxG8dxATurGYztVDUnFiKtrRLTbq4Fh 9IZPt+lm2NR1Oyv7McpJ8scCAAvIHooJsx4ZuOwrcPjgEZ7Pdc/yv+qTVLPk9ay23oa3IlqxBhks SVeXb2XwMFpvJ4UC4vsauP9d ) ; Key ID = 54081 fail. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240530160845 20240509150845 55696 fail. MlaJeE1svdhPaHA21K6tIo57OMAT5tyJlGkWRweyud6L3m03HLK+J/NFyS7QSnZJf7LqfAxdXhWU 3wmmTr67joDk4/LFKwg224RJZkXLbPcyrq2AEl+KOJKAMLZD616TzjaYlsdKzqZu62FnQX25oEcD oEUAR7iuECiOpzT6M8ZijDd4ijXaFvj6glePcAoTX2Lk3gG6hLBrXmpGU/Y0Q6jJsKJUDSzCiWzx XpoK6gxx0lWZKX/sthKxbj+XIrPaSnFiqY3liv4dzHlom840TKYIFB51UHuKvhgxddui/v3Z+Uo1 O0rw35ct36NMf0utyL0x3TpeW8JUPAgL+qaXpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for fail
	`fail. 3600 IN DNSKEY ( 257 3 8 AwEAAcArwiE7q6ZtxsIeFwnNsMJz+BQ01HjGgURCL29DOKR6ei1nF+wW/g2XHqODr6CoyPbl0XkO xkQ2szZ49C8ytxi2opm/RygQ0zPcTFl1Vdm2jRmfa1pHSIg0rJjx7pbV6I6t7AnEYU8La4fhOjV5 l2OhzD09Uvucs9+4capi9qeRF8OEI73PUERYdnbX/pbMMpsyJ1C6EKIf9mmrzfGJ+Ecac2TUYJBi YnxCHRY7lZmN6nUzaOTjcoLvXZ4i8MQrcm+ixthQ1ypbKvwUeX/sxfnNATYL2dWOqAjDAMTXSrGZ 3HUB/ZF1/BV8cROC3ABC9a88SX8YR5kP1cxNtU5V7hU= ) ; Key ID = 55696`
	`fail. 3600 IN DNSKEY ( 256 3 8 AwEAAal+3IC1yKRcO/7b/JlgRQ+ZvwRzd1mRnLPXg1lB3bFn3H7alC/ePIduaHy4TD8Th8ZDqViu P47fZsdwb7+Y4UnuYeLzVn70eotpwTY9euxlZZUw6wg5BEr4dd3YlOk8VSp+5S+dgZkwfqjyM9qJ pHqhU2j40hob+iHhV3LmUqB1 ) ; Key ID = 20109`
	`fail. 3600 IN DNSKEY ( 256 3 8 AwEAAbxVCO2ttD2rMSjF080ubeG4+warQLzZgEX6blZ7MSxG8dxATurGYztVDUnFiKtrRLTbq4Fh 9IZPt+lm2NR1Oyv7McpJ8scCAAvIHooJsx4ZuOwrcPjgEZ7Pdc/yv+qTVLPk9ay23oa3IlqxBhks SVeXb2XwMFpvJ4UC4vsauP9d ) ; Key ID = 54081`
	DNSKEY=55696/SEP is now in the chain-of-trust
	DS=55696/SHA-256 verifies DNSKEY=55696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fail. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240530160845 20240509150845 55696 fail. MlaJeE1svdhPaHA21K6tIo57OMAT5tyJlGkWRweyud6L3m03HLK+J/NFyS7QSnZJf7LqfAxdXhWU 3wmmTr67joDk4/LFKwg224RJZkXLbPcyrq2AEl+KOJKAMLZD616TzjaYlsdKzqZu62FnQX25oEcD oEUAR7iuECiOpzT6M8ZijDd4ijXaFvj6glePcAoTX2Lk3gG6hLBrXmpGU/Y0Q6jJsKJUDSzCiWzx XpoK6gxx0lWZKX/sthKxbj+XIrPaSnFiqY3liv4dzHlom840TKYIFB51UHuKvhgxddui/v3Z+Uo1 O0rw35ct36NMf0utyL0x3TpeW8JUPAgL+qaXpg== )`
	RRSIG=55696 and DNSKEY=55696/SEP verifies the DNSKEY RRset
	DNSKEY=20109 is now in the chain-of-trust
	DNSKEY=54081 is now in the chain-of-trust
	Query to v0n2.nic.fail for dnssec.fail/A
	Received 313 bytes from 65.22.22.56
	;; Response received from [65.22.22.56] 313 octets ;; HEADER SECTION ;; id = 61271 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) dnssec.fail. 3600 IN NS ns2.hyp.net. dnssec.fail. 3600 IN NS ns3.hyp.net. dnssec.fail. 3600 IN NS ns1.hyp.net. dnssec.fail. 3600 IN DS ( 38464 8 2 178d380e84dee3ac7770872ccbb829e6c142fd6f6d97d31292751234d1040131 ) dnssec.fail. 3600 IN RRSIG ( DS 8 2 3600 20240530160845 20240509150845 54081 fail. r2ZbfzRxitRkAyUWMDfAjNh8ds+6qz6gSYC/nQP30cySbaNqNXhNm9eSQpdY6WWb2PLQNe0EmKEY 3EtJN37OeirSLkMIaBAMAYcqgCdlCCQQ3rQjvrZ0qFmDzoSHeQDX62DO9ZGzvdfClqZNX9sYaKlV 59xQJiGyjM6vve8Dn8g= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to v2n0.nic.fail for dnssec.fail/DNSKEY
	Received 313 bytes from 65.22.23.56
	;; Response received from [65.22.23.56] 313 octets ;; HEADER SECTION ;; id = 33142 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) dnssec.fail. 3600 IN NS ns2.hyp.net. dnssec.fail. 3600 IN NS ns1.hyp.net. dnssec.fail. 3600 IN NS ns3.hyp.net. dnssec.fail. 3600 IN DS ( 38464 8 2 178d380e84dee3ac7770872ccbb829e6c142fd6f6d97d31292751234d1040131 ) dnssec.fail. 3600 IN RRSIG ( DS 8 2 3600 20240530160845 20240509150845 54081 fail. r2ZbfzRxitRkAyUWMDfAjNh8ds+6qz6gSYC/nQP30cySbaNqNXhNm9eSQpdY6WWb2PLQNe0EmKEY 3EtJN37OeirSLkMIaBAMAYcqgCdlCCQQ3rQjvrZ0qFmDzoSHeQDX62DO9ZGzvdfClqZNX9sYaKlV 59xQJiGyjM6vve8Dn8g= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone dnssec.fail

dnssec.fail

	Checking DS between fail and dnssec.fail
	Query to v2n0.nic.fail for dnssec.fail/DS
	Received 252 bytes from 65.22.23.56
	;; Response received from [65.22.23.56] 252 octets ;; HEADER SECTION ;; id = 5971 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN DS ;; ANSWER SECTION (2 records) dnssec.fail. 3600 IN DS ( 38464 8 2 178d380e84dee3ac7770872ccbb829e6c142fd6f6d97d31292751234d1040131 ) dnssec.fail. 3600 IN RRSIG ( DS 8 2 3600 20240530160845 20240509150845 54081 fail. r2ZbfzRxitRkAyUWMDfAjNh8ds+6qz6gSYC/nQP30cySbaNqNXhNm9eSQpdY6WWb2PLQNe0EmKEY 3EtJN37OeirSLkMIaBAMAYcqgCdlCCQQ3rQjvrZ0qFmDzoSHeQDX62DO9ZGzvdfClqZNX9sYaKlV 59xQJiGyjM6vve8Dn8g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for dnssec.fail in the fail zone
	DS=38464/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`dnssec.fail. 3600 IN RRSIG ( DS 8 2 3600 20240530160845 20240509150845 54081 fail. r2ZbfzRxitRkAyUWMDfAjNh8ds+6qz6gSYC/nQP30cySbaNqNXhNm9eSQpdY6WWb2PLQNe0EmKEY 3EtJN37OeirSLkMIaBAMAYcqgCdlCCQQ3rQjvrZ0qFmDzoSHeQDX62DO9ZGzvdfClqZNX9sYaKlV 59xQJiGyjM6vve8Dn8g= )`
	RRSIG=54081 and DNSKEY=54081 verifies the DS RRset
	DS=38464/SHA-256 is now in the chain-of-trust
	`dnssec.fail. 3600 IN DS ( 38464 8 2 178d380e84dee3ac7770872ccbb829e6c142fd6f6d97d31292751234d1040131 )`
	Query to ns2.hyp.net for dnssec.fail/DNSKEY
	Received 111 bytes from 192.174.68.10
	;; Response received from [192.174.68.10] 111 octets ;; HEADER SECTION ;; id = 32641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dnssec.fail. 3600 IN SOA ( ns1.hyp.net. hostmaster.domeneshop.no. 1634557985 ;serial 21600 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	DS=38464/SHA-256 is published, but a corresponding DNSKEY is not
	Query to ns3.hyp.net for dnssec.fail/A
	Received 56 bytes from 151.249.126.3
	;; Response received from [151.249.126.3] 56 octets ;; HEADER SECTION ;; id = 50418 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN A ;; ANSWER SECTION (1 record) dnssec.fail. 300 IN A 185.134.245.113 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.hyp.net is authoritative for dnssec.fail
	Query to ns1.hyp.net for dnssec.fail/SOA
	Received 111 bytes from 151.249.124.1
	;; Response received from [151.249.124.1] 111 octets ;; HEADER SECTION ;; id = 9196 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN SOA ;; ANSWER SECTION (1 record) dnssec.fail. 3600 IN SOA ( ns1.hyp.net. hostmaster.domeneshop.no. 1634557985 ;serial 21600 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.hyp.net for dnssec.fail/SOA
	Received 111 bytes from 192.174.68.10
	;; Response received from [192.174.68.10] 111 octets ;; HEADER SECTION ;; id = 9405 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN SOA ;; ANSWER SECTION (1 record) dnssec.fail. 3600 IN SOA ( ns1.hyp.net. hostmaster.domeneshop.no. 1634557985 ;serial 21600 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.hyp.net for dnssec.fail/A
	Received 56 bytes from 151.249.126.3
	;; Response received from [151.249.126.3] 56 octets ;; HEADER SECTION ;; id = 31780 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN A ;; ANSWER SECTION (1 record) dnssec.fail. 300 IN A 185.134.245.113 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dnssec.fail A RR has value 185.134.245.113
	No RRSIGs found

dnssec.fail

	Query to ns2.hyp.net for dnssec.fail/A
	Received 56 bytes from 192.174.68.10
	;; Response received from [192.174.68.10] 56 octets ;; HEADER SECTION ;; id = 18868 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN A ;; ANSWER SECTION (1 record) dnssec.fail. 300 IN A 185.134.245.113 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.hyp.net is authoritative for dnssec.fail
	Query to ns2.hyp.net for dnssec.fail/A
	Received 56 bytes from 192.174.68.10
	;; Response received from [192.174.68.10] 56 octets ;; HEADER SECTION ;; id = 57705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN A ;; ANSWER SECTION (1 record) dnssec.fail. 300 IN A 185.134.245.113 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dnssec.fail A RR has value 185.134.245.113
	No RRSIGs found

dnssec.fail

	Query to ns1.hyp.net for dnssec.fail/A
	Received 56 bytes from 151.249.124.1
	;; Response received from [151.249.124.1] 56 octets ;; HEADER SECTION ;; id = 55250 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN A ;; ANSWER SECTION (1 record) dnssec.fail. 300 IN A 185.134.245.113 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.hyp.net is authoritative for dnssec.fail
	Query to ns1.hyp.net for dnssec.fail/A
	Received 56 bytes from 151.249.124.1
	;; Response received from [151.249.124.1] 56 octets ;; HEADER SECTION ;; id = 11156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dnssec.fail. IN A ;; ANSWER SECTION (1 record) dnssec.fail. 300 IN A 185.134.245.113 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dnssec.fail A RR has value 185.134.245.113
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dnssec.fail at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: