Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2017-06-22 22:19:33 UTC, NTP stratum 4

Analyzing DNSSEC problems for nox.su

.
Found 3 DNSKEY records for .
DS=19036/SHA-256 verifies DNSKEY=19036/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=19036 and DNSKEY=19036/SEP verifies the DNSKEY RRset
su
Found 1 DS records for su in the . zone
Found 1 RRSIGs over DS RRset
RRSIG=14796 and DNSKEY=14796 verifies the DS RRset
Found 2 DNSKEY records for su
DS=22111/SHA-256 verifies DNSKEY=22111/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=22111 and DNSKEY=22111/SEP verifies the DNSKEY RRset
nox.su
Found 1 DS records for nox.su in the su zone
Found 1 RRSIGs over DS RRset
RRSIG=12810 and DNSKEY=12810 verifies the DS RRset
Found 5 DNSKEY records for nox.su
DS=19816/SHA-256 verifies DNSKEY=19816/SEP
Found 5 RRSIGs over DNSKEY RRset
RRSIG=17166 is expired
RRSIG=19816 is expired
RRSIG=47469 is expired
RRSIG=53630 is expired
RRSIG=54792 is expired
None of the 5 RRSIG and 3 DNSKEY records validate the DNSKEY RRset
The DNSKEY RRset was not signed by any keys in the chain-of-trust
nox.su A RR has value 50.16.193.159
Found 3 RRSIGs over A RRset
RRSIG=17166 and DNSKEY=17166 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nox.su at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options