DNSSEC Analyzer - CONSUMERSENTINEL.GOV

Domain Name:

Time: 2020-01-26 06:25:37 UTC, NTP stratum 4

Analyzing DNSSEC problems for CONSUMERSENTINEL.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 25090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to g.root-servers.net for CONSUMERSENTINEL.GOV/A
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for CONSUMERSENTINEL.GOV/A: 'IPv6 transport disabled'
	Received 678 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (678 bytes) ;; HEADER SECTION ;; id = 30402 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (658 bytes) ;; HEADER SECTION ;; id = 57247 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to c.root-servers.net for GOV/DS
	Received 406 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (406 bytes) ;; HEADER SECTION ;; id = 32633 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20200208050000 20200126040000 33853 . NLmwwnjZExz+EkEUyxEbPAiKq1uHPuPI1eLI3ff+F+kM9bbBsOOBaRvKYTaOinrRgR8+DgfNbvEW K5vvCoqrSFRpFVwGfRE5PyTeKoAF+JwjqFkkef7PwoX1P6AA//GFGSPob4/Z1X6/jYbuJOsz/Be9 JkesAHd/+0pQVlbhbiq6SxTj7H+vJ+qWIHzNLWzYUH2Z1hdZWzZKF+xPamdihqpwDEYBWoKqDgoD RP9EzYZxmPuGdi3/MPC53C1IwmM6ZtRqkfWpugEEL2PArzClZKu4wk1ymMEmH3oNEipgukfE0mhu kNNENAYoTsRJdWvoqe3MTxZH1ZrRUTdXaARYdg== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to c.gov-servers.net for GOV/DNSKEY
	Received 777 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (777 bytes) ;; HEADER SECTION ;; id = 23560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAdccuiuxqTxvRcMVh4o9DCfREPNTe3hGEklbdV+L99lKySyIzskGLJ6XDBrWgBeY7ZRSOWGQ 2eHdQLN61fRyqWpVLpNzqaIz/UmMP74VPBCz4QXRDkG4hDO3uifCDVs8Jex4TrYT+hGNYmprbsrq dVQCgeeHc7UMKI/SjusQ4uTKgJ9CWt02/AgK+zKFi3LCBVDGnUwE2kUOL1b0MWfT0ks= ) ; Key ID = 36558`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200204200254 20200120195754 7698 gov. AW2ehlTHCkvsoKYTELKLWDsRb5hmUce7lXmZl5v8iXW1lcvUgYHjl4mKrTmw0o/ZQunLH8tjhL2a nbCy8GymuXffQUXpsWfCtMDd1j2lQBL2ECPw418yOOCqTnoRI6DJvvArASkqLeXHX2bAu4/351ug E/d63O3H30850u+Tgakg/vlTpsNCMxNeJExRDBbwCp4VD7PZN75TMmRM4Y4McQsoGiEdDCsFJXnV 9SP2S24Y/uKSLySFDQ0qZ41uZUoEZaMclbD3Uh6AFlzapQggME06B8zjfauOHVvpfak1QgzXqDKf kWoOradUBw+7eU1rITOiOmukHsMHNdvjdDoqSA== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=36558 is now in the chain-of-trust
	Query to a.gov-servers.net for CONSUMERSENTINEL.GOV/A
	Received 395 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (395 bytes) ;; HEADER SECTION ;; id = 62915 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINEL.GOV. 86400 IN NS dns3.l-secb.net. CONSUMERSENTINEL.GOV. 86400 IN NS dns2.l-secb.net. CONSUMERSENTINEL.GOV. 86400 IN NS dns1.l-secb.net. CONSUMERSENTINEL.GOV. 3600 IN DS ( 31039 8 1 d780b07d52d0eda3d9023001dca5d5c7edadf0e7 ) CONSUMERSENTINEL.GOV. 3600 IN DS ( 31039 8 2 c99a75d8175c33ef0903f48c396af7f68a4cf891fb531dd3a70ac7f2ded9d85a ) CONSUMERSENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. Rmf5JmKHxeMqQheoJQs1kG3dODMbiJTD6gnvJ7ejx3Karenm4jXW1R8I9uZ1gGNRgTnUEQk+92Zx K6Rpw2q6aUUpdqwlvnlA61shORPlUo6fcVgcZsApjZebpA+XK5B2T+fa74yvaodKA9y5HcoxrVca OKgIUm/2bEJg7yufRUYgON7H7+1F7ZXF4ufJMK/Kec1BdV9/rb7iYU7ENGa2kw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for CONSUMERSENTINEL.GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for CONSUMERSENTINEL.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 395 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (395 bytes) ;; HEADER SECTION ;; id = 29204 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINEL.GOV. 86400 IN NS dns3.l-secb.net. CONSUMERSENTINEL.GOV. 86400 IN NS dns2.l-secb.net. CONSUMERSENTINEL.GOV. 86400 IN NS dns1.l-secb.net. CONSUMERSENTINEL.GOV. 3600 IN DS ( 31039 8 1 d780b07d52d0eda3d9023001dca5d5c7edadf0e7 ) CONSUMERSENTINEL.GOV. 3600 IN DS ( 31039 8 2 c99a75d8175c33ef0903f48c396af7f68a4cf891fb531dd3a70ac7f2ded9d85a ) CONSUMERSENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. Rmf5JmKHxeMqQheoJQs1kG3dODMbiJTD6gnvJ7ejx3Karenm4jXW1R8I9uZ1gGNRgTnUEQk+92Zx K6Rpw2q6aUUpdqwlvnlA61shORPlUo6fcVgcZsApjZebpA+XK5B2T+fa74yvaodKA9y5HcoxrVca OKgIUm/2bEJg7yufRUYgON7H7+1F7ZXF4ufJMK/Kec1BdV9/rb7iYU7ENGa2kw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone CONSUMERSENTINEL.GOV

CONSUMERSENTINEL.GOV

	Checking DS between GOV and CONSUMERSENTINEL.GOV
	Query to d.gov-servers.net for CONSUMERSENTINEL.GOV/DS
	Received 328 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (328 bytes) ;; HEADER SECTION ;; id = 23366 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN DS ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 3600 IN DS ( 31039 8 1 d780b07d52d0eda3d9023001dca5d5c7edadf0e7 ) CONSUMERSENTINEL.GOV. 3600 IN DS ( 31039 8 2 c99a75d8175c33ef0903f48c396af7f68a4cf891fb531dd3a70ac7f2ded9d85a ) CONSUMERSENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. Rmf5JmKHxeMqQheoJQs1kG3dODMbiJTD6gnvJ7ejx3Karenm4jXW1R8I9uZ1gGNRgTnUEQk+92Zx K6Rpw2q6aUUpdqwlvnlA61shORPlUo6fcVgcZsApjZebpA+XK5B2T+fa74yvaodKA9y5HcoxrVca OKgIUm/2bEJg7yufRUYgON7H7+1F7ZXF4ufJMK/Kec1BdV9/rb7iYU7ENGa2kw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for CONSUMERSENTINEL.GOV in the GOV zone
	DS=31039/SHA-1 has algorithm RSASHA256
	DS=31039/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`CONSUMERSENTINEL.GOV. 3600 IN RRSIG ( DS 8 2 3600 20200202041008 20200126041008 36558 gov. Rmf5JmKHxeMqQheoJQs1kG3dODMbiJTD6gnvJ7ejx3Karenm4jXW1R8I9uZ1gGNRgTnUEQk+92Zx K6Rpw2q6aUUpdqwlvnlA61shORPlUo6fcVgcZsApjZebpA+XK5B2T+fa74yvaodKA9y5HcoxrVca OKgIUm/2bEJg7yufRUYgON7H7+1F7ZXF4ufJMK/Kec1BdV9/rb7iYU7ENGa2kw== )`
	RRSIG=36558 and DNSKEY=36558 verifies the DS RRset
	DS=31039/SHA-1 is now in the chain-of-trust
	`CONSUMERSENTINEL.GOV. 3600 IN DS ( 31039 8 1 d780b07d52d0eda3d9023001dca5d5c7edadf0e7 )`
	`CONSUMERSENTINEL.GOV. 3600 IN DS ( 31039 8 2 c99a75d8175c33ef0903f48c396af7f68a4cf891fb531dd3a70ac7f2ded9d85a )`
	Query to dns1.l-secb.net for CONSUMERSENTINEL.GOV/DNSKEY
	Error querying dns1.l-secb.net/2001:1900:2268:770:198:77:70:37 for CONSUMERSENTINEL.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1289 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (1289 bytes) ;; HEADER SECTION ;; id = 30616 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbFJH5A8C1LD17aaf/7Lck+AWJ3ZS/VyvKzpSK9Ezd/aUywVTJ9/FQNyW9xecAGiJ+tLundq RXw+7nd7wqML8eu4KdsfTLQgOXXdHaAUojCsCg+KvHVjdt4ITeg6odlCm36cOKs/QKdvcrXKHnDC fXFCnIdH732sO8Pgl/rxATXV ) ; Key ID = 10974 CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAY5fRiOxz2WpnPTjvIjaaf76Uu2to5C9Gc0XPAvZYEjKMPl0BWZNt9kzZvgBKefjd/ppSK2/ 6ApgripDZonQCzLC4hCgExaGI/+q2bE2r+YPf330PQBfjp34vagl+5hB5RQKl6hKWQx1eN4Ue/Cw hyiJm5FVPeXwf9P2cgCNmp+j ) ; Key ID = 29340 CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAcCYRqy13S9a7j6CEiDhIT51aZFenlGjD6TILdjkX/opPV2v1wb+7UnaGhRcWVAszY67dyBa qoo1vQ3oLD/A8c+tIMLS0Od7ySzePcgow4GkKhpm2MAzJCpTYtFZgDL45p2/jHbEnoVpqLxfTjod itD42oVC7AmwamRZENeWZRagBeyONnWh6+tn10gpZ+j5xN3xYjGtGSD79oYXX4xGpHYa3Z7YBlp7 JOSU6XnIXcgEB6JCBoyyD6P1HduiC+N/pma6k/PhCXATrRu6Hxh7efllYByxIHqSS0KsGfsT8zu2 RPv+S0ZiNdBEl976PHmDyR5tgVmK4ErvtY6xmQzRe9k= ) ; Key ID = 31039 CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200202055707 20200126055707 10974 consumersentinel.gov. kh87QUBTjPsEOkk5O7+iZy36GT6vcDXsS0Vq3af1TxI6VFJYBe75SHbW1peOH4eaFLhmtQR02vMA VbtxC7ePX47jCexTTaawTjaPh8cJX6RUHTF/8UqupIN3SSaNAK1eY3C5z1Pffab+qSaYIfKioZc4 Ec/oA822AUBBXLS2D7E= ) CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200202055707 20200126055707 29340 consumersentinel.gov. ggPf9nfIA2pEt3bIup8wAMDkI5DTviX2VaOwEBOCuDzis6v/zhZ9tUXglYC9gqIT2c43l73BvvH1 X4+UDmDBkP/XSsewT2FYiEmTeq+CUbXD2hBWwK9H3vYan6JNZpHRd4icuKk7q28PRApbRnJAnLuj eNrNW9TJUw6zMHKv78g= ) CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200202055707 20200126055707 31039 consumersentinel.gov. pd2TGQ3IkIM0rdKz000smqsZF/FZpkdZuua7aHrUYrpCeYlF1lllGGCAdxKIuDDdY4SwnIZXnD3Y lnnvHTEXR+HimbGmBQSx23PMgLasFJQLcgd7hlsPBhMk8iUAgoqLaONkVaLe2AUxtwHREUMY1eUj +8NLbPsYombTrWRn8u+CQ2xLApn117ggf+pD/HKghVj2ou/y5AaK0wWvMWGUqAndmkJGIvk/8sQS G/q5QRqWpXBNsrFZAn4mMr6Y9e9BRQBm8hGUNI6nDgHHbRsNVNTZBMX5O9ez1QJwIJxmjf2qynMy jZ4sgY8lUi5xwNFqYAbHZgwhk40bfvyHzlW4NQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for CONSUMERSENTINEL.GOV
	`CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAbFJH5A8C1LD17aaf/7Lck+AWJ3ZS/VyvKzpSK9Ezd/aUywVTJ9/FQNyW9xecAGiJ+tLundq RXw+7nd7wqML8eu4KdsfTLQgOXXdHaAUojCsCg+KvHVjdt4ITeg6odlCm36cOKs/QKdvcrXKHnDC fXFCnIdH732sO8Pgl/rxATXV ) ; Key ID = 10974`
	`CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAY5fRiOxz2WpnPTjvIjaaf76Uu2to5C9Gc0XPAvZYEjKMPl0BWZNt9kzZvgBKefjd/ppSK2/ 6ApgripDZonQCzLC4hCgExaGI/+q2bE2r+YPf330PQBfjp34vagl+5hB5RQKl6hKWQx1eN4Ue/Cw hyiJm5FVPeXwf9P2cgCNmp+j ) ; Key ID = 29340`
	`CONSUMERSENTINEL.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAcCYRqy13S9a7j6CEiDhIT51aZFenlGjD6TILdjkX/opPV2v1wb+7UnaGhRcWVAszY67dyBa qoo1vQ3oLD/A8c+tIMLS0Od7ySzePcgow4GkKhpm2MAzJCpTYtFZgDL45p2/jHbEnoVpqLxfTjod itD42oVC7AmwamRZENeWZRagBeyONnWh6+tn10gpZ+j5xN3xYjGtGSD79oYXX4xGpHYa3Z7YBlp7 JOSU6XnIXcgEB6JCBoyyD6P1HduiC+N/pma6k/PhCXATrRu6Hxh7efllYByxIHqSS0KsGfsT8zu2 RPv+S0ZiNdBEl976PHmDyR5tgVmK4ErvtY6xmQzRe9k= ) ; Key ID = 31039`
	DNSKEY=31039/SEP is now in the chain-of-trust
	DS=31039/SHA-1 verifies DNSKEY=31039/SEP
	DS=31039/SHA-256 verifies DNSKEY=31039/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200202055707 20200126055707 10974 consumersentinel.gov. kh87QUBTjPsEOkk5O7+iZy36GT6vcDXsS0Vq3af1TxI6VFJYBe75SHbW1peOH4eaFLhmtQR02vMA VbtxC7ePX47jCexTTaawTjaPh8cJX6RUHTF/8UqupIN3SSaNAK1eY3C5z1Pffab+qSaYIfKioZc4 Ec/oA822AUBBXLS2D7E= )`
	`CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200202055707 20200126055707 29340 consumersentinel.gov. ggPf9nfIA2pEt3bIup8wAMDkI5DTviX2VaOwEBOCuDzis6v/zhZ9tUXglYC9gqIT2c43l73BvvH1 X4+UDmDBkP/XSsewT2FYiEmTeq+CUbXD2hBWwK9H3vYan6JNZpHRd4icuKk7q28PRApbRnJAnLuj eNrNW9TJUw6zMHKv78g= )`
	`CONSUMERSENTINEL.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200202055707 20200126055707 31039 consumersentinel.gov. pd2TGQ3IkIM0rdKz000smqsZF/FZpkdZuua7aHrUYrpCeYlF1lllGGCAdxKIuDDdY4SwnIZXnD3Y lnnvHTEXR+HimbGmBQSx23PMgLasFJQLcgd7hlsPBhMk8iUAgoqLaONkVaLe2AUxtwHREUMY1eUj +8NLbPsYombTrWRn8u+CQ2xLApn117ggf+pD/HKghVj2ou/y5AaK0wWvMWGUqAndmkJGIvk/8sQS G/q5QRqWpXBNsrFZAn4mMr6Y9e9BRQBm8hGUNI6nDgHHbRsNVNTZBMX5O9ez1QJwIJxmjf2qynMy jZ4sgY8lUi5xwNFqYAbHZgwhk40bfvyHzlW4NQ== )`
	RRSIG=10974 and DNSKEY=10974 verifies the DNSKEY RRset
	RRSIG=29340 and DNSKEY=29340 verifies the DNSKEY RRset
	RRSIG=31039 and DNSKEY=31039/SEP verifies the DNSKEY RRset
	DNSKEY=10974 is now in the chain-of-trust
	DNSKEY=29340 is now in the chain-of-trust
	Query to dns3.l-secb.net for CONSUMERSENTINEL.GOV/A
	Received 425 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (425 bytes) ;; HEADER SECTION ;; id = 40336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 15 IN A 34.232.181.29 CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20200201055949 20200125055949 10974 consumersentinel.gov. j8ztBJDV0aV1+utXrMGKj1WjuEl+phVkpd3JmZcAB/bmKrRjMe6nBJOMxEB+BDkffmrSc3THnEq6 qj1yAx17CntKlqxXZx3hDApdwz2RTUG+Tum1z0zrK4riS40kF8wqa05Rp9WQM+dV4wSyYhuiWlAU itdUGrTnc2bb8cTkFl8= ) CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20200202055911 20200126055911 29340 consumersentinel.gov. Jm2K7UTSw8KAWIWrc+0di8KzXWqmRoSUHAvUa9JiBJB0iQw8OnLns20tSGK9+sbNWyDNoV0duPHB CtQzTTJj/y8wNsQpyaC8pj9kBXJwmWy3q0AFAg0maTaC895eyUy9OSwt/IVy7/R1YGHqjjUHYvqy akZGtQRdLrPnSm8J93w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CONSUMERSENTINEL.GOV is authoritative for CONSUMERSENTINEL.GOV
	Found RRSIG signed by consumersentinel.gov zone
	Query to dns2.l-secb.net for CONSUMERSENTINEL.GOV/SOA
	Received 1015 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (1015 bytes) ;; HEADER SECTION ;; id = 34122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200201055756 20200125055756 10974 consumersentinel.gov. OuvsEPMSP6HE/5HCyeKEx2UzbxikLZ7xK/VOs7UWkvVUwxO/RDVgct07kwJNkBG5a1QmEzEyNMlx ++5Aa0meKSqqgB92EeVuRoy8IFLuRSErt7LvLae+1uKHJx9iA6LzhNeXte6bbAFlY2Hl9epUX7Ql LRbjMusTmb2ghXoLGy0= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200202055932 20200126055932 29340 consumersentinel.gov. bG+mbS4QZMrb97jhbk21uY3ly0E5FkRkFkEnZtG28MqFCMLTeZED8PRqZfWenfuN80kOFV1uReeX /bADyrZbLbMshZ5w0WYFea1GZo96TE+7tzPN5G23zgQZZFqldDKrMjMHxCbRKUdGuh4q+paqt1G5 6VkMZaVnXmqE19jQ/lQ= ) ;; AUTHORITY SECTION (5 records) CONSUMERSENTINEL.GOV. 900 IN NS dns1.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns3.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns2.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20200201055456 20200125055456 10974 consumersentinel.gov. aQhe0amxTCdPemGzMaaLsPo/KwFT3cOCaoI476Ka8zWG/GypbM8WVNzXErAZQciNLaJdq12pizU3 62hSEapgFrDQySGrIE32bnmzDIPH8dvB5zlEN/5Od3ZgrgVkSGkty3QNB9chfHGjaijHwd4niXTU jlciPCwXkojfKRUh3ec= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20200202055241 20200126055241 29340 consumersentinel.gov. AIAQxlj1OGlMQ5ZJdUv1YJHymBwC3PZ3Kae7Gy5pO3Cy14bTt83841/6LyldJjOyRRnNtYfmeOnv SRtnzBc+NhzZCLMpi6JSjK5KTNC6bfZQJjlSfBANyxCUKwsz+SNG5S7lME/FPbDm+HxfLEHvokqU PzKizocGJa4zDvaH8lo= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for CONSUMERSENTINEL.GOV/SOA
	Received 1015 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (1015 bytes) ;; HEADER SECTION ;; id = 3580 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200201055318 20200125055318 10974 consumersentinel.gov. Yl/cLddbF9oA8MCoXyXbzjHuXompCjK9nVLet4k5y6oUKsW4dPpmymiAHDtA1r59l7rcOivbPs+1 JHq45a9s8KB5jEH5+OLcSVXHx3qQ0W0eEpSdOjeaSFYMcZ3MStnVVCeZP1ymPvCCtpzlIU7uU4NU 2Dm6htn6pAN01fSBkKY= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200202055334 20200126055334 29340 consumersentinel.gov. aQzyxP0cQ96Fm/WsZh0iocRL0ZIDhldiFSGNB/H39+IC17Z6F3v2bONKwyrZKdwcBfM5wC8QQVKz juGvCNTpY32fJG+1tNDfZX4oL7QRicYjpbspujtj/4HgCFQXFr5n9eMkkkU9j942+VlTTixxVPSq N12D/oJPDBJdHl0sot4= ) ;; AUTHORITY SECTION (5 records) CONSUMERSENTINEL.GOV. 900 IN NS dns1.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns3.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns2.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20200201055535 20200125055535 10974 consumersentinel.gov. cNEoFfmhCfbBFBWaZhnfHwTQqWq8ioXO3lf0QEukhnIR+PktkhAhc7bLyTUZGDNjd2OEE+y1B/en Sd5bQVu4cpk0Vh0J7nUrqg166iaXXPTioueaVw9IgOb14SV7R95BtIuQzxDTqIZqhONA/DcqEPsD 32wmVCwhGZPYVy9gsyU= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20200202055143 20200126055143 29340 consumersentinel.gov. CGkDWOHN2Ta86fJEZjW8RDiYVrzQzQb2tbiELl/718+1b3kQjcTROA7S2VaWq2r1yJKzakWdnfEy QtCMqiz8j7iYpLKxrMqr+/Uo/fdBsAFbbGs3LLwhH24Dxgt7aengbz7XDn2i6PKiqi+cfd+4ce9p AbTolXtfvXCwm1P25IA= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for CONSUMERSENTINEL.GOV/SOA
	Error querying dns3.l-secb.net/2600:1f14:a2e:4b00:35:163:67:210 for CONSUMERSENTINEL.GOV/SOA: 'IPv6 transport disabled'
	Received 1015 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (1015 bytes) ;; HEADER SECTION ;; id = 8738 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102101 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200201060100 20200125060100 10974 consumersentinel.gov. B7ogVg61VrBR8Fj2Mk921vyF7TOWDAjh2hdMlsGisJscZhfXAu2YOhhINnQeBrlul0U5sEGvgXuu qx2Yqe8pH75iQ5b0kck+Z+cG7kIVEQCC0DU3W2jbBqJ46pLmgP8GF+3BcB8aHdZx1qsVtm/2AOax EczO/Kf3KgV3ZiKfY+g= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( SOA 8 2 900 20200202055454 20200126055454 29340 consumersentinel.gov. fgErSO5xI9/4kPssfIeqD6O6+B/8iwOZHy0LUwBRPn5QV/0dvH9wFhoNcl/i2TpYGJsX74Wvjpu/ n/EqWvt7nw1zqPxocj9zvP/AdTZCo4AHcs/orkmGanaEeW5p+a1TeKfVHd+EJ2Sv9TI3hTrfr7JV VE8A3cxj69dXC5rxpyw= ) ;; AUTHORITY SECTION (5 records) CONSUMERSENTINEL.GOV. 900 IN NS dns2.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns1.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN NS dns3.l-secb.net. CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20200201055457 20200125055457 10974 consumersentinel.gov. chzSUgQwk9nksa6NExZTneoLMwo1bQdzj4PD6R1X4GwOB+yclYhPbNB/If+GgVmyiB8ZgnfTH1R5 0HnkiJr9j7GfwSjnWA+1Qo6SHltwQW7mGGoe1rmPNfz8j/n/QIDJN4J123OX7gSImzAhsasoiiM/ /6sCGjWIlbB9+fnpl3U= ) CONSUMERSENTINEL.GOV. 900 IN RRSIG ( NS 8 2 900 20200202055206 20200126055206 29340 consumersentinel.gov. B0psOa7Bbx+w+WHLyJPvvAr6+6mJ0xpdBpNCWnrZxRjz/CFPyko0TdMsBKwVrBh/nU5LDyMCyy1+ MBd8oz5wgoqEiiDzwA65vGYiVvWAtsZArsnOutDqOfKsMU5MAepFTGdZGcoxXo0iXfXuhRdKoa3K NK6q9U8QXp5o3C++DTg= ) ;; ADDITIONAL SECTION (7 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns2.l-secb.net. 43200 IN A 205.130.212.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns1.l-secb.net. 43200 IN AAAA 2001:1900:2268:770:198:77:70:37 dns2.l-secb.net. 43200 IN AAAA 2001:1900:2268:512:205:130:212:37 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for CONSUMERSENTINEL.GOV/A
	Error querying dns3.l-secb.net/2600:1f14:a2e:4b00:35:163:67:210 for CONSUMERSENTINEL.GOV/A: 'IPv6 transport disabled'
	Received 425 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (425 bytes) ;; HEADER SECTION ;; id = 54150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINEL.GOV. IN A ;; ANSWER SECTION (3 records) CONSUMERSENTINEL.GOV. 15 IN A 34.232.181.29 CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20200201055910 20200125055910 10974 consumersentinel.gov. UUGa4nfrskf+l5FmR1nwGzg1Vzoyg1T3tlMwJ9ckZp+XWN7mCuULIaO4+oe4ANcUZoDL64Gt/gid esfMpQ0v1xD8K76NXxWq7jC+pkoTfHrrmCnzlcu3+l1KIeH6/23VZk460pv278vGgluePG60m0UA pkl7mMMSWBhX21eRnwY= ) CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20200202055213 20200126055213 29340 consumersentinel.gov. Y0L/5FJz8eG+rG4lTSFT6rp1GzRsa3Kf4+3rSM0aOveBd2CyObxlY4xfLwl8sDFNlFflD7silrhf iyiCntgJErE8nPq7yHghwkgEGeOfCMgbh3Wuvc8iLlL7vVthP3FeAva2O0HuTrWIAAD9q5ZMEpWz 3RF3u/GxvVlTwhbzCY8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CONSUMERSENTINEL.GOV A RR has value 34.232.181.29
	Found 2 RRSIGs over A RRset
	`CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20200201055910 20200125055910 10974 consumersentinel.gov. UUGa4nfrskf+l5FmR1nwGzg1Vzoyg1T3tlMwJ9ckZp+XWN7mCuULIaO4+oe4ANcUZoDL64Gt/gid esfMpQ0v1xD8K76NXxWq7jC+pkoTfHrrmCnzlcu3+l1KIeH6/23VZk460pv278vGgluePG60m0UA pkl7mMMSWBhX21eRnwY= )`
	`CONSUMERSENTINEL.GOV. 15 IN RRSIG ( A 8 2 15 20200202055213 20200126055213 29340 consumersentinel.gov. Y0L/5FJz8eG+rG4lTSFT6rp1GzRsa3Kf4+3rSM0aOveBd2CyObxlY4xfLwl8sDFNlFflD7silrhf iyiCntgJErE8nPq7yHghwkgEGeOfCMgbh3Wuvc8iLlL7vVthP3FeAva2O0HuTrWIAAD9q5ZMEpWz 3RF3u/GxvVlTwhbzCY8= )`
	RRSIG=10974 and DNSKEY=10974 verifies the A RRset
	RRSIG=29340 and DNSKEY=29340 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test CONSUMERSENTINEL.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: