DNSSEC Analyzer - CONSUMERSENTINEL.GOV

Domain Name:

Time: 2019-10-23 03:12:46 UTC, NTP stratum 4

Analyzing DNSSEC problems for CONSUMERSENTINEL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 19193 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191111000000 20191021000000 20326 . UDCwnWmQfdxPPfZdmccTpMESh93HP9yY83eaSV5X+YRPlixCwIlGql9MLUgR/2K+GCzEEaCIVYc9 KKMFCsXeO7PeftbWdqSynTxhT7HPNEq7Mmy5hYZltuQznFGVd26Ltngkh4bh4/YzyLfJiQwo7JLU Bm1BO/tYsvpPeFYy24mWbvkG6I5h0IVZHUv9gubt61bFmNIlC9spn+wjHpc/CZJPth9lh9uUGeSY tMUnO2swob9m2KqU+85/ovOy6/WEcaITaxGL2zjXHr2iqKBPPhxB/f8bH9g7g4k0b1dFZP+b6d7l C5zqe5W5RvyXlYcCbejMV+fflyq2EarRkQ3qsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191111000000 20191021000000 20326 . UDCwnWmQfdxPPfZdmccTpMESh93HP9yY83eaSV5X+YRPlixCwIlGql9MLUgR/2K+GCzEEaCIVYc9 KKMFCsXeO7PeftbWdqSynTxhT7HPNEq7Mmy5hYZltuQznFGVd26Ltngkh4bh4/YzyLfJiQwo7JLU Bm1BO/tYsvpPeFYy24mWbvkG6I5h0IVZHUv9gubt61bFmNIlC9spn+wjHpc/CZJPth9lh9uUGeSY tMUnO2swob9m2KqU+85/ovOy6/WEcaITaxGL2zjXHr2iqKBPPhxB/f8bH9g7g4k0b1dFZP+b6d7l C5zqe5W5RvyXlYcCbejMV+fflyq2EarRkQ3qsg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to f.root-servers.net for CONSUMERSENTINEL.GOV/A
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for CONSUMERSENTINEL.GOV/A: 'IPv6 transport disabled'
	Received 678 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (678 bytes) ;; HEADER SECTION ;; id = 40804 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191104170000 20191022160000 22545 . PqxhDjGyCQI9epw4VyIB73F2VP0YzOUjX6Rv/Hdx7yLMaNbbm9AuG4MAmZ9LD6ZHGPglLsnwhDJD +OmiUPgZH0eiV+MPNlrASTIpLyML7lLFX58Vq1zgYGfofpQff4k8FFJMD4M6ql5gx7yU7Oalt5wv LjQrX13g64dRy378ccIkne8Jb3LwHtyHR/ebgBr/QK2IaKApHp2YqJle3h8BcT+rYmnOWhda4GbX QY5VboofrKb0CwyzUvviQsj7NsUNn7jZildsPj+XUO1ZPyhAPsrcGCw8zKo3QJl7e6IBBhUL4Xux hicvAvoLQGcaKb/x5Iil1bWkiw7Q3gaCtZ3RFw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to e.root-servers.net for GOV/DNSKEY
	Received 661 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (661 bytes) ;; HEADER SECTION ;; id = 10009 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191104170000 20191022160000 22545 . PqxhDjGyCQI9epw4VyIB73F2VP0YzOUjX6Rv/Hdx7yLMaNbbm9AuG4MAmZ9LD6ZHGPglLsnwhDJD +OmiUPgZH0eiV+MPNlrASTIpLyML7lLFX58Vq1zgYGfofpQff4k8FFJMD4M6ql5gx7yU7Oalt5wv LjQrX13g64dRy378ccIkne8Jb3LwHtyHR/ebgBr/QK2IaKApHp2YqJle3h8BcT+rYmnOWhda4GbX QY5VboofrKb0CwyzUvviQsj7NsUNn7jZildsPj+XUO1ZPyhAPsrcGCw8zKo3QJl7e6IBBhUL4Xux hicvAvoLQGcaKb/x5Iil1bWkiw7Q3gaCtZ3RFw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to e.root-servers.net for GOV/DS
	Received 406 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (406 bytes) ;; HEADER SECTION ;; id = 25391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20191104170000 20191022160000 22545 . PqxhDjGyCQI9epw4VyIB73F2VP0YzOUjX6Rv/Hdx7yLMaNbbm9AuG4MAmZ9LD6ZHGPglLsnwhDJD +OmiUPgZH0eiV+MPNlrASTIpLyML7lLFX58Vq1zgYGfofpQff4k8FFJMD4M6ql5gx7yU7Oalt5wv LjQrX13g64dRy378ccIkne8Jb3LwHtyHR/ebgBr/QK2IaKApHp2YqJle3h8BcT+rYmnOWhda4GbX QY5VboofrKb0CwyzUvviQsj7NsUNn7jZildsPj+XUO1ZPyhAPsrcGCw8zKo3QJl7e6IBBhUL4Xux hicvAvoLQGcaKb/x5Iil1bWkiw7Q3gaCtZ3RFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20191104170000 20191022160000 22545 . PqxhDjGyCQI9epw4VyIB73F2VP0YzOUjX6Rv/Hdx7yLMaNbbm9AuG4MAmZ9LD6ZHGPglLsnwhDJD +OmiUPgZH0eiV+MPNlrASTIpLyML7lLFX58Vq1zgYGfofpQff4k8FFJMD4M6ql5gx7yU7Oalt5wv LjQrX13g64dRy378ccIkne8Jb3LwHtyHR/ebgBr/QK2IaKApHp2YqJle3h8BcT+rYmnOWhda4GbX QY5VboofrKb0CwyzUvviQsj7NsUNn7jZildsPj+XUO1ZPyhAPsrcGCw8zKo3QJl7e6IBBhUL4Xux hicvAvoLQGcaKb/x5Iil1bWkiw7Q3gaCtZ3RFw== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (743 bytes) ;; HEADER SECTION ;; id = 61406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191029214731 20191014214231 7698 gov. t2F0f9d3MtPasB/xkT/xMMBp0/s9JGj2q+UlyVbReP0W3YvzT2mNS7Mn2rhaNtT8qPZJ7cWbdKK+ CmWKC639WOtqHtIZpbLLSImywybAySzNcFcUDpjCe321+GtNlk/LHTXAjT3r9RTQa9YzDChrzjz4 bbhh2sJoD4SuIl/b+a1EmQZV6+XN+v7ELki2nXB+dfeoQWUbocdg8BZbmVAcf8zgfvhERRkCRXgR S+J/yh7CVupke1QM88tvQwS5yRS0vMP1+bAv9JhdX1F7ADGaS+3iovGWvXbCPCr6HXOBHMj8W0OR MO/PjWYh+582vOYKIVDf6vCMqCc/RX+YNlHUiw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191029214731 20191014214231 7698 gov. t2F0f9d3MtPasB/xkT/xMMBp0/s9JGj2q+UlyVbReP0W3YvzT2mNS7Mn2rhaNtT8qPZJ7cWbdKK+ CmWKC639WOtqHtIZpbLLSImywybAySzNcFcUDpjCe321+GtNlk/LHTXAjT3r9RTQa9YzDChrzjz4 bbhh2sJoD4SuIl/b+a1EmQZV6+XN+v7ELki2nXB+dfeoQWUbocdg8BZbmVAcf8zgfvhERRkCRXgR S+J/yh7CVupke1QM88tvQwS5yRS0vMP1+bAv9JhdX1F7ADGaS+3iovGWvXbCPCr6HXOBHMj8W0OR MO/PjWYh+582vOYKIVDf6vCMqCc/RX+YNlHUiw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=32795 is now in the chain-of-trust
	Query to d.gov-servers.net for CONSUMERSENTINEL.GOV/A
	Received 363 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (363 bytes) ;; HEADER SECTION ;; id = 4716 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINEL.GOV. 86400 IN NS dns3.l-secb.net. CONSUMERSENTINEL.GOV. 86400 IN NS dns2.l-secb.net. CONSUMERSENTINEL.GOV. 86400 IN NS dns1.l-secb.net. CONSUMERSENTINEL.GOV. 3600 IN DS ( 15997 8 2 7fa4885e9e263f96a3fc7e8082ea9ab18785dbe7b0a8ea844e456d0bf6dc2b1a ) CONSUMERSENTINEL.GOV. 3600 IN DS ( 15997 8 1 680c17faeb6bef33a99ca7d0920656fd0d39d913 ) CONSUMERSENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191029221008 20191022221008 32795 gov. GqZ+wI0PtE4UNFBX4B2qKn3zILsk7+OeVCWCN7wiCdAISFItv6ZCOE0I84A8BdnU/3K4h/FcuYtm L/LGPw+/f4WwhVltMv9q1C1EalPOsBJXXK+lpIX8k68u3VTMquXuwDPnaqeI65qf14RU0xrhUDKS 3rm+2vxMZdr86cgM6iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for CONSUMERSENTINEL.GOV/DNSKEY
	Received 363 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (363 bytes) ;; HEADER SECTION ;; id = 10427 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINEL.GOV. 86400 IN NS dns3.l-secb.net. CONSUMERSENTINEL.GOV. 86400 IN NS dns2.l-secb.net. CONSUMERSENTINEL.GOV. 86400 IN NS dns1.l-secb.net. CONSUMERSENTINEL.GOV. 3600 IN DS ( 15997 8 2 7fa4885e9e263f96a3fc7e8082ea9ab18785dbe7b0a8ea844e456d0bf6dc2b1a ) CONSUMERSENTINEL.GOV. 3600 IN DS ( 15997 8 1 680c17faeb6bef33a99ca7d0920656fd0d39d913 ) CONSUMERSENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191029221008 20191022221008 32795 gov. GqZ+wI0PtE4UNFBX4B2qKn3zILsk7+OeVCWCN7wiCdAISFItv6ZCOE0I84A8BdnU/3K4h/FcuYtm L/LGPw+/f4WwhVltMv9q1C1EalPOsBJXXK+lpIX8k68u3VTMquXuwDPnaqeI65qf14RU0xrhUDKS 3rm+2vxMZdr86cgM6iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone CONSUMERSENTINEL.GOV

CONSUMERSENTINEL.GOV

	Checking DS between GOV and CONSUMERSENTINEL.GOV
	Query to c.gov-servers.net for CONSUMERSENTINEL.GOV/DS
	Received 296 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (296 bytes) ;; HEADER SECTION ;; id = 5404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN DS ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 3600 IN DS ( 15997 8 2 7fa4885e9e263f96a3fc7e8082ea9ab18785dbe7b0a8ea844e456d0bf6dc2b1a ) CONSUMERSENTINEL.GOV. 3600 IN DS ( 15997 8 1 680c17faeb6bef33a99ca7d0920656fd0d39d913 ) CONSUMERSENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191029221008 20191022221008 32795 gov. GqZ+wI0PtE4UNFBX4B2qKn3zILsk7+OeVCWCN7wiCdAISFItv6ZCOE0I84A8BdnU/3K4h/FcuYtm L/LGPw+/f4WwhVltMv9q1C1EalPOsBJXXK+lpIX8k68u3VTMquXuwDPnaqeI65qf14RU0xrhUDKS 3rm+2vxMZdr86cgM6iE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for CONSUMERSENTINEL.GOV in the GOV zone
	DS=15997/SHA-256 has algorithm RSASHA256
	DS=15997/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`CONSUMERSENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191029221008 20191022221008 32795 gov. GqZ+wI0PtE4UNFBX4B2qKn3zILsk7+OeVCWCN7wiCdAISFItv6ZCOE0I84A8BdnU/3K4h/FcuYtm L/LGPw+/f4WwhVltMv9q1C1EalPOsBJXXK+lpIX8k68u3VTMquXuwDPnaqeI65qf14RU0xrhUDKS 3rm+2vxMZdr86cgM6iE= )`
	RRSIG=32795 and DNSKEY=32795 verifies the DS RRset
	DS=15997/SHA-256 is now in the chain-of-trust
	`CONSUMERSENTINEL.GOV. 3600 IN DS ( 15997 8 2 7fa4885e9e263f96a3fc7e8082ea9ab18785dbe7b0a8ea844e456d0bf6dc2b1a )`
	`CONSUMERSENTINEL.GOV. 3600 IN DS ( 15997 8 1 680c17faeb6bef33a99ca7d0920656fd0d39d913 )`
	Query to dns1.l-secb.net for CONSUMERSENTINEL.GOV/DNSKEY
	Received 1289 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (1289 bytes) ;; HEADER SECTION ;; id = 13468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeURPwH4Rpem1MTxAXBF86ces0ZyanX/vFzroek+VSPnyCs92LbFzdogEV/UiJ1GTmuID9V7 6vC2df7CXAXsnuWl6sDBUKN90yF1tcr7FuP88EHWGOIelNRPhT+5C4WOlYrKwJJ3bcGDn/ODXbHy DKrgSVkunX0X5hsGc9F6+po9 ) ; Key ID = 65295 CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaKyq/sqvkQHHz9OmDz/Ph4FERQOqKlXb2kXZ0Vairfp52/XmhGw7eBXEVQlEgGZgwJe3At3 WxxP18aNRTbgwZ8eQOwk+UGvZxPoBeaAap8KDqi25ROBe5MfG1DmG/yt+BtGW2l3mEL32nGkZ9Ul WJMonjAVcZTMwMJCXCicy/0v ) ; Key ID = 13983 CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbEJrj4lHUDETqLXOa3w4LOga2VnZK+n3U6afMYwW51IRDGcO+I0nCRf4hMGdaNs8ejiBBzT 34y0913x97xJZozf9E7FyaN4mggWLc1cbszOH5DRqUfvz8MpCVvIPDs2EEzupa6k654OUmeHGvj0 uyiV0EiaT2ZUjpL1C5yv3wzFCdz07KH/ddO6S+C5uzwnOSzBA+KVrMcgdfSss4ysusHpBG+k65+c wq0XpWJ1OJwIkzt9pF84NJKKevG5sUAvfMsF9FukN+f1UKifdyKDY9vzkI6l9yVCQJssubfCmDHO dECtlJ2UFoT1k/BFryAFEcdshRuS5abWrkLD3WuVJoU= ) ; Key ID = 15997 CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025215025 20191018215025 65295 consumersentinel.gov. Ok4thmSdSLKuY1TlRBJdbWVaHxxmCkY6jR37nrQP/shQvh9b7tLDyk8E8YpPhK1hTMGtcZ5z6Hd3 55DGGx5e1ZSYs+OanOlpP0XbSySaPEe2QL8QMB9hCx4Olk78KPIk2X4AvyllM3zlEnWKegNSlOgs /gWsJG72ETFP2eOYu14= ) CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025215025 20191018215025 13983 consumersentinel.gov. i1BF1vbnD58bflZxzb19sCSdDP5xyt3SSo/u1FQlXr+2cgtzJB5d0V2KMAUr5SWlb/k8cDdtePm5 69DQ1qZRQx5SB+laPaTztoImCRploppdKqlMEenZg3wxzQaWLn7LfFhynOW+eodR+EcX49PCtZAq 41dZSxY3TlwqIeVkmWI= ) CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025215025 20191018215025 15997 consumersentinel.gov. GF2uIl8wNx4BaFDBK0Ad2K7i5gX6dl4B9a9kKUsGa4/BxOCApLcB5S42WTtEquX3VuBr4ANiloI/ WI2b84CNROgOKrRSYgtngLI+zSe3UwlW7VE8QqGBjXtfxnXVUc3NYC+c0k058hxHxVYzsxxrD28m ceyT6KH7nk5LbFvde4T9Nm6Fg5dMEmI7RUmJlznuc5VDofKV66jOcYFk3bt/XjTqV2A7Hj5tLdPR NfbBxoRSYRYy1mNw9Vp2oO4R4zN8fa8r81W/VKtrdAkKelc5KvHltlLK4VvFxRiXWoqddWaf6RJF nxrFVuNpIQlS4o3P8xEWGsAXGOPUhdBDtDqj+Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for CONSUMERSENTINEL.GOV
	`CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAeURPwH4Rpem1MTxAXBF86ces0ZyanX/vFzroek+VSPnyCs92LbFzdogEV/UiJ1GTmuID9V7 6vC2df7CXAXsnuWl6sDBUKN90yF1tcr7FuP88EHWGOIelNRPhT+5C4WOlYrKwJJ3bcGDn/ODXbHy DKrgSVkunX0X5hsGc9F6+po9 ) ; Key ID = 65295`
	`CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAaKyq/sqvkQHHz9OmDz/Ph4FERQOqKlXb2kXZ0Vairfp52/XmhGw7eBXEVQlEgGZgwJe3At3 WxxP18aNRTbgwZ8eQOwk+UGvZxPoBeaAap8KDqi25ROBe5MfG1DmG/yt+BtGW2l3mEL32nGkZ9Ul WJMonjAVcZTMwMJCXCicy/0v ) ; Key ID = 13983`
	`CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbEJrj4lHUDETqLXOa3w4LOga2VnZK+n3U6afMYwW51IRDGcO+I0nCRf4hMGdaNs8ejiBBzT 34y0913x97xJZozf9E7FyaN4mggWLc1cbszOH5DRqUfvz8MpCVvIPDs2EEzupa6k654OUmeHGvj0 uyiV0EiaT2ZUjpL1C5yv3wzFCdz07KH/ddO6S+C5uzwnOSzBA+KVrMcgdfSss4ysusHpBG+k65+c wq0XpWJ1OJwIkzt9pF84NJKKevG5sUAvfMsF9FukN+f1UKifdyKDY9vzkI6l9yVCQJssubfCmDHO dECtlJ2UFoT1k/BFryAFEcdshRuS5abWrkLD3WuVJoU= ) ; Key ID = 15997`
	DNSKEY=15997/SEP is now in the chain-of-trust
	DS=15997/SHA-256 verifies DNSKEY=15997/SEP
	DS=15997/SHA-1 verifies DNSKEY=15997/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025215025 20191018215025 65295 consumersentinel.gov. Ok4thmSdSLKuY1TlRBJdbWVaHxxmCkY6jR37nrQP/shQvh9b7tLDyk8E8YpPhK1hTMGtcZ5z6Hd3 55DGGx5e1ZSYs+OanOlpP0XbSySaPEe2QL8QMB9hCx4Olk78KPIk2X4AvyllM3zlEnWKegNSlOgs /gWsJG72ETFP2eOYu14= )`
	`CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025215025 20191018215025 13983 consumersentinel.gov. i1BF1vbnD58bflZxzb19sCSdDP5xyt3SSo/u1FQlXr+2cgtzJB5d0V2KMAUr5SWlb/k8cDdtePm5 69DQ1qZRQx5SB+laPaTztoImCRploppdKqlMEenZg3wxzQaWLn7LfFhynOW+eodR+EcX49PCtZAq 41dZSxY3TlwqIeVkmWI= )`
	`CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025215025 20191018215025 15997 consumersentinel.gov. GF2uIl8wNx4BaFDBK0Ad2K7i5gX6dl4B9a9kKUsGa4/BxOCApLcB5S42WTtEquX3VuBr4ANiloI/ WI2b84CNROgOKrRSYgtngLI+zSe3UwlW7VE8QqGBjXtfxnXVUc3NYC+c0k058hxHxVYzsxxrD28m ceyT6KH7nk5LbFvde4T9Nm6Fg5dMEmI7RUmJlznuc5VDofKV66jOcYFk3bt/XjTqV2A7Hj5tLdPR NfbBxoRSYRYy1mNw9Vp2oO4R4zN8fa8r81W/VKtrdAkKelc5KvHltlLK4VvFxRiXWoqddWaf6RJF nxrFVuNpIQlS4o3P8xEWGsAXGOPUhdBDtDqj+Q== )`
	RRSIG=65295 and DNSKEY=65295 verifies the DNSKEY RRset
	RRSIG=13983 and DNSKEY=13983 verifies the DNSKEY RRset
	RRSIG=15997 and DNSKEY=15997/SEP verifies the DNSKEY RRset
	DNSKEY=65295 is now in the chain-of-trust
	DNSKEY=13983 is now in the chain-of-trust
	Query to dns2.l-secb.net for CONSUMERSENTINEL.GOV/A
	Received 425 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (425 bytes) ;; HEADER SECTION ;; id = 34627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 15 IN A 34.232.181.29 CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20191027215114 20191020215114 65295 consumersentinel.gov. dVyHDox35SAi28oHAJAhYTYPHfz9dmli5THCNOZbcJLnkxFkuY/1JTttNWR0aAdKVdHzpVAJsCVA LRyo4HGd5mq2YNQJ2ovEbDVvtO+7qLnn82iOY2hPFImxsOA4m21uUnb69WyacTzPzGdab52lQID3 l1wWr7CkuyBFtOePnBs= ) CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20191025215034 20191018215034 13983 consumersentinel.gov. dtKuYrS9f/PHG0HVTiy+KuJIVKb3x6ZrkyW9/qJPPSHhyJV0J8J3BUZbUywEOSmH7QjvPgs8xbZp hLlqC4T9BoocuxWOpr4y3iE1hEwEehPbYBtGXcX8S2iR1TKFBeRO/VKbhANkC8rlFwFzdXukmzUe DaCvqH1gxQAg4soF/sI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CONSUMERSENTINEL.GOV is authoritative for CONSUMERSENTINEL.GOV
	Found RRSIG signed by consumersentinel.gov zone
	Query to dns2.l-secb.net for CONSUMERSENTINEL.GOV/SOA
	Error querying dns2.l-secb.net/2001:1900:2268:512:205:130:212:37 for CONSUMERSENTINEL.GOV/SOA: 'IPv6 transport disabled'
	Received 987 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (987 bytes) ;; HEADER SECTION ;; id = 36129 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029143811 20191022143811 65295 consumersentinel.gov. LDYi43rzDW5Pz+QuivhWveDHk94SvWJ+w+OUmkIK4mp9jDlemC1SAJNOJ26XfQUNFxMjiDy8Rk7e +A4qOcCG0SVgGt66bzMcu7rCoFWpAWIzcUzRq5Uv+OWZ5yJfhn0Wq/968SXFUO0lhmR34Okpq8Ow 4j4PVW2TBjUDm16Wqy8= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029143811 20191022143811 13983 consumersentinel.gov. jciPzypKBEP8aygXB9nHx8mdctNWVCxUxrVcxXYQcwWuUxnHUCcxDR6TLkChoo0Dxd09w/ITDE60 iPuYncnHnIpl12gUh3jk1HQE9wTkzuL+835lhTlwQ8OoPUw2pDdT29x47DoCwOdrx2gBUs315bh3 /PVLH0fY5pPe3XKnSnY= ) ;; AUTHORITY SECTION (5 records) CONSUMERSENTINEL.GOV. 900 IN NS dns2.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns3.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns1.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20191027213818 20191020213818 65295 consumersentinel.gov. 1MAtABeSJ7kF55A8TQK32vfx4RUihcqlC2AyFO+zZMjAWuTFBQLCimdoM9lW9lDqLtfln8bFo30r Y28es8xuscrnmrsXcQWpKCYoGc3PIjzZFNGwU5rACGvY6EuTMbN55/1Ic4Akp2AHS9x+saRa/tuf iFuGWlTriGSlMBLBho8= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20191025214935 20191018214935 13983 consumersentinel.gov. fSx299H4NNSiv1fEP7yzZBhPGzww2wVIGKHm9C7H9DIy48gzGD82Lu6QEDUeGWpKt/CCBCAU+wLn fdU1SFjJVPQekAl0+D8Z+dz+jYlagfdluzx1nety71qgAZs3G8I6hQdOmL4ca+qmZQJgJ1h8gNOh sdAOziUJvkxIky2GA3w= ) ;; ADDITIONAL SECTION (6 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for CONSUMERSENTINEL.GOV/SOA
	Received 987 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (987 bytes) ;; HEADER SECTION ;; id = 20462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029143926 20191022143926 65295 consumersentinel.gov. jnncbdlOzIT2gKS7JbsjyY4aYsiSU5UWw303ySXc/4yWZ8olilITz0KOrgjfoWbP/JJUrmrpnPb/ KwgD2PNNQBHHsT5Kg/0hqQB5F97aHGrP7r2TDjomoTrVF3fnTUNyZMm/iboQxwUMPVU5BDd9slOz 1EE/l6ahNe4loyem1YE= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029143926 20191022143926 13983 consumersentinel.gov. Dl8FCsk6tt2FwHjM42vfobxGVZUAAWYs7AhsQaccVfZjnfvJQ9JOR43c7bPuWrNlo6gMIbXCkPnx SuUyePyaM3AI1C418+T88Gp4kO6If0gWhnPmoqIpT9knYL8EqF/k2eNK4j4RULqd1CG3Z2tWMYNs mGYLicMU4JeAdWEfB8o= ) ;; AUTHORITY SECTION (5 records) CONSUMERSENTINEL.GOV. 900 IN NS dns2.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns1.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns3.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20191027213145 20191020213145 65295 consumersentinel.gov. cFrcMyt8ztRISSt1tfEhOWuD3Wz6C8RK+HsZaXelmdaHJLm2N8Pt0CdNWTWmnzkB9xpGIYosRnxK dZgKZlmXQfzo1bqEF3wETEKhp4ojkY7nwuy6Xc7SkgmwdjhhtXvO+U3vMI6JYyz5oSnExP9Gbdky OV6HCo5OfAg1vZnxGAk= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20191025214931 20191018214931 13983 consumersentinel.gov. UXlvrdxy8iCz+rNj23YZOelpG5XLausoOhipFejLJZ6DKnHSgfOD9etkcJ6IsCpcHl1NOLbMyrJ1 mE9DA62UreGlGcDVL6oPAzOrVoVJxQP8b3olo3JXZrq0Tx1820po1yGP8/JsfV5kF6L4gptTYuwy KyXyojQeR1f96DPwU9w= ) ;; ADDITIONAL SECTION (6 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for CONSUMERSENTINEL.GOV/SOA
	Error querying dns3.l-secb.net/2600:1f14:a2e:4b00:35:163:67:210 for CONSUMERSENTINEL.GOV/SOA: 'IPv6 transport disabled'
	Received 987 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (987 bytes) ;; HEADER SECTION ;; id = 58547 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029143819 20191022143819 65295 consumersentinel.gov. PzjAkVKIYfeoJSmom7ew01jZoykxspWOf/PLaNvDOk1pQqOwzeBb6NylD+NfpDz6HZq7KXf4DxPV nu+aD2agX46oeIp5IIMHg6cWdLO+jRuVS6G4vNO94N6btBhyaUN8tm6kbQxEFes6ya7M5znh8M1U PxzkwRyw7GdVpP3YmAo= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029143819 20191022143819 13983 consumersentinel.gov. aKf6FqMqKiLW38EosTgx+jaKHY9avHbymzkW9bnv7DQIoF8Ix0/EEpJyX0WMFiCnJypK+jUYvYuj beYDBwk7rSXV6Id5L8t627VwX/cZOZjXOY07EunT0AqeC4+WrZMgpxTHee/jhoEjMwhH4SLjMsDD TM3O20RHiB1SGUgH5iM= ) ;; AUTHORITY SECTION (5 records) CONSUMERSENTINEL.GOV. 900 IN NS dns3.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns2.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns1.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20191027213037 20191020213037 65295 consumersentinel.gov. tYoAGDuAARvVCtq0XT1wJ3Koz0Ah2zXDH5/BYW7Y1PKZOWj0/sqyiOglGIRfRhCbfMMClxsguLEe jn9n1UnRhI5z6x/DXerOFScNEvqSgoKaf+Nd6b3N960KsGkceakqN4gP99gfI0eS4ZKQEEE+03vp 51bq/CTxvTbNXkUy1G8= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20191025214935 20191018214935 13983 consumersentinel.gov. fSx299H4NNSiv1fEP7yzZBhPGzww2wVIGKHm9C7H9DIy48gzGD82Lu6QEDUeGWpKt/CCBCAU+wLn fdU1SFjJVPQekAl0+D8Z+dz+jYlagfdluzx1nety71qgAZs3G8I6hQdOmL4ca+qmZQJgJ1h8gNOh sdAOziUJvkxIky2GA3w= ) ;; ADDITIONAL SECTION (6 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.l-secb.net for CONSUMERSENTINEL.GOV/A
	Error querying dns2.l-secb.net/2001:1900:2268:512:205:130:212:37 for CONSUMERSENTINEL.GOV/A: 'IPv6 transport disabled'
	Received 425 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (425 bytes) ;; HEADER SECTION ;; id = 44096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 15 IN A 34.232.181.29 CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20191027215748 20191020215748 65295 consumersentinel.gov. 48VZszb2q65kdJVCp0u3ieLlvrngFmv1OFku6XSrCervzomlms9rr9IQLBJMT7TBtDHXnEKrQD2y 6FGKy8+cXVU1uI+TBJ8laN+/6u8WyI2UJZnizNe/aofi6siPDMUtDjfjJoDxz1bPM77dQBrwOFh6 6f8bjsph5LYo7seEcNg= ) CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20191025215050 20191018215050 13983 consumersentinel.gov. oMFGNcHjWVYrkEx6LVHDrPw2k8vNbKGKesmMa7+YBbMX2uU+40I5ikjhIeuCTLSNR4pm3YXCnwJz afsTPtvNieDr9k37lUXEtKZgAb7rZs5y/cbxJ5HEygbg9kqq+ql3q2HwE6vEXziy5lufpJvqlfzU 6xpT16yrRfQwsNtwY5w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CONSUMERSENTINEL.GOV A RR has value 34.232.181.29
	Found 2 RRSIGs over A RRset
	`CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20191027215748 20191020215748 65295 consumersentinel.gov. 48VZszb2q65kdJVCp0u3ieLlvrngFmv1OFku6XSrCervzomlms9rr9IQLBJMT7TBtDHXnEKrQD2y 6FGKy8+cXVU1uI+TBJ8laN+/6u8WyI2UJZnizNe/aofi6siPDMUtDjfjJoDxz1bPM77dQBrwOFh6 6f8bjsph5LYo7seEcNg= )`
	`CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20191025215050 20191018215050 13983 consumersentinel.gov. oMFGNcHjWVYrkEx6LVHDrPw2k8vNbKGKesmMa7+YBbMX2uU+40I5ikjhIeuCTLSNR4pm3YXCnwJz afsTPtvNieDr9k37lUXEtKZgAb7rZs5y/cbxJ5HEygbg9kqq+ql3q2HwE6vEXziy5lufpJvqlfzU 6xpT16yrRfQwsNtwY5w= )`
	RRSIG=65295 and DNSKEY=65295 verifies the A RRset
	RRSIG=13983 and DNSKEY=13983 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test CONSUMERSENTINEL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: