DNSSEC Analyzer - CONSUMERSENTINELNETWORK.GOV

Domain Name:

Time: 2019-10-23 02:00:34 UTC, NTP stratum 4

Analyzing DNSSEC problems for CONSUMERSENTINELNETWORK.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 16471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191111000000 20191021000000 20326 . UDCwnWmQfdxPPfZdmccTpMESh93HP9yY83eaSV5X+YRPlixCwIlGql9MLUgR/2K+GCzEEaCIVYc9 KKMFCsXeO7PeftbWdqSynTxhT7HPNEq7Mmy5hYZltuQznFGVd26Ltngkh4bh4/YzyLfJiQwo7JLU Bm1BO/tYsvpPeFYy24mWbvkG6I5h0IVZHUv9gubt61bFmNIlC9spn+wjHpc/CZJPth9lh9uUGeSY tMUnO2swob9m2KqU+85/ovOy6/WEcaITaxGL2zjXHr2iqKBPPhxB/f8bH9g7g4k0b1dFZP+b6d7l C5zqe5W5RvyXlYcCbejMV+fflyq2EarRkQ3qsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191111000000 20191021000000 20326 . UDCwnWmQfdxPPfZdmccTpMESh93HP9yY83eaSV5X+YRPlixCwIlGql9MLUgR/2K+GCzEEaCIVYc9 KKMFCsXeO7PeftbWdqSynTxhT7HPNEq7Mmy5hYZltuQznFGVd26Ltngkh4bh4/YzyLfJiQwo7JLU Bm1BO/tYsvpPeFYy24mWbvkG6I5h0IVZHUv9gubt61bFmNIlC9spn+wjHpc/CZJPth9lh9uUGeSY tMUnO2swob9m2KqU+85/ovOy6/WEcaITaxGL2zjXHr2iqKBPPhxB/f8bH9g7g4k0b1dFZP+b6d7l C5zqe5W5RvyXlYcCbejMV+fflyq2EarRkQ3qsg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to l.root-servers.net for CONSUMERSENTINELNETWORK.GOV/A
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for CONSUMERSENTINELNETWORK.GOV/A: 'IPv6 transport disabled'
	Received 682 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (682 bytes) ;; HEADER SECTION ;; id = 424 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191104170000 20191022160000 22545 . PqxhDjGyCQI9epw4VyIB73F2VP0YzOUjX6Rv/Hdx7yLMaNbbm9AuG4MAmZ9LD6ZHGPglLsnwhDJD +OmiUPgZH0eiV+MPNlrASTIpLyML7lLFX58Vq1zgYGfofpQff4k8FFJMD4M6ql5gx7yU7Oalt5wv LjQrX13g64dRy378ccIkne8Jb3LwHtyHR/ebgBr/QK2IaKApHp2YqJle3h8BcT+rYmnOWhda4GbX QY5VboofrKb0CwyzUvviQsj7NsUNn7jZildsPj+XUO1ZPyhAPsrcGCw8zKo3QJl7e6IBBhUL4Xux hicvAvoLQGcaKb/x5Iil1bWkiw7Q3gaCtZ3RFw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (658 bytes) ;; HEADER SECTION ;; id = 19174 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191104170000 20191022160000 22545 . PqxhDjGyCQI9epw4VyIB73F2VP0YzOUjX6Rv/Hdx7yLMaNbbm9AuG4MAmZ9LD6ZHGPglLsnwhDJD +OmiUPgZH0eiV+MPNlrASTIpLyML7lLFX58Vq1zgYGfofpQff4k8FFJMD4M6ql5gx7yU7Oalt5wv LjQrX13g64dRy378ccIkne8Jb3LwHtyHR/ebgBr/QK2IaKApHp2YqJle3h8BcT+rYmnOWhda4GbX QY5VboofrKb0CwyzUvviQsj7NsUNn7jZildsPj+XUO1ZPyhAPsrcGCw8zKo3QJl7e6IBBhUL4Xux hicvAvoLQGcaKb/x5Iil1bWkiw7Q3gaCtZ3RFw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to d.root-servers.net for GOV/DS
	Received 403 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (403 bytes) ;; HEADER SECTION ;; id = 19912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20191104170000 20191022160000 22545 . PqxhDjGyCQI9epw4VyIB73F2VP0YzOUjX6Rv/Hdx7yLMaNbbm9AuG4MAmZ9LD6ZHGPglLsnwhDJD +OmiUPgZH0eiV+MPNlrASTIpLyML7lLFX58Vq1zgYGfofpQff4k8FFJMD4M6ql5gx7yU7Oalt5wv LjQrX13g64dRy378ccIkne8Jb3LwHtyHR/ebgBr/QK2IaKApHp2YqJle3h8BcT+rYmnOWhda4GbX QY5VboofrKb0CwyzUvviQsj7NsUNn7jZildsPj+XUO1ZPyhAPsrcGCw8zKo3QJl7e6IBBhUL4Xux hicvAvoLQGcaKb/x5Iil1bWkiw7Q3gaCtZ3RFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20191104170000 20191022160000 22545 . PqxhDjGyCQI9epw4VyIB73F2VP0YzOUjX6Rv/Hdx7yLMaNbbm9AuG4MAmZ9LD6ZHGPglLsnwhDJD +OmiUPgZH0eiV+MPNlrASTIpLyML7lLFX58Vq1zgYGfofpQff4k8FFJMD4M6ql5gx7yU7Oalt5wv LjQrX13g64dRy378ccIkne8Jb3LwHtyHR/ebgBr/QK2IaKApHp2YqJle3h8BcT+rYmnOWhda4GbX QY5VboofrKb0CwyzUvviQsj7NsUNn7jZildsPj+XUO1ZPyhAPsrcGCw8zKo3QJl7e6IBBhUL4Xux hicvAvoLQGcaKb/x5Iil1bWkiw7Q3gaCtZ3RFw== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (743 bytes) ;; HEADER SECTION ;; id = 59438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191029214731 20191014214231 7698 gov. t2F0f9d3MtPasB/xkT/xMMBp0/s9JGj2q+UlyVbReP0W3YvzT2mNS7Mn2rhaNtT8qPZJ7cWbdKK+ CmWKC639WOtqHtIZpbLLSImywybAySzNcFcUDpjCe321+GtNlk/LHTXAjT3r9RTQa9YzDChrzjz4 bbhh2sJoD4SuIl/b+a1EmQZV6+XN+v7ELki2nXB+dfeoQWUbocdg8BZbmVAcf8zgfvhERRkCRXgR S+J/yh7CVupke1QM88tvQwS5yRS0vMP1+bAv9JhdX1F7ADGaS+3iovGWvXbCPCr6HXOBHMj8W0OR MO/PjWYh+582vOYKIVDf6vCMqCc/RX+YNlHUiw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPyPvPjCOOxe71vhn8KNKkRNvz+ttcK3l0mbbdvPuIYZkbo5tW/6YqyfCPoATceDs2qxcCBE3/9 Ulu6AMbnrCndRjIJ/F5b0C3CHmdMBPSHtXNy0z5VXU7dTz/cmSKlaPrDPRrY6WdcTaI3VcnU6cyu dx7N0SeYR9r+TmDbkVd9Dw== ) ; Key ID = 32795`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191029214731 20191014214231 7698 gov. t2F0f9d3MtPasB/xkT/xMMBp0/s9JGj2q+UlyVbReP0W3YvzT2mNS7Mn2rhaNtT8qPZJ7cWbdKK+ CmWKC639WOtqHtIZpbLLSImywybAySzNcFcUDpjCe321+GtNlk/LHTXAjT3r9RTQa9YzDChrzjz4 bbhh2sJoD4SuIl/b+a1EmQZV6+XN+v7ELki2nXB+dfeoQWUbocdg8BZbmVAcf8zgfvhERRkCRXgR S+J/yh7CVupke1QM88tvQwS5yRS0vMP1+bAv9JhdX1F7ADGaS+3iovGWvXbCPCr6HXOBHMj8W0OR MO/PjWYh+582vOYKIVDf6vCMqCc/RX+YNlHUiw== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=32795 is now in the chain-of-trust
	Query to a.gov-servers.net for CONSUMERSENTINELNETWORK.GOV/A
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for CONSUMERSENTINELNETWORK.GOV/A: 'IPv6 transport disabled'
	Received 370 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (370 bytes) ;; HEADER SECTION ;; id = 18978 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns2.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 1 609f0e817ed813beed422c7451052b65ed0554d6 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 2 9e8204c63acf2c2563e50d787fa180a4cb730d962adc2f8b16b0dc85089a3f0f ) CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191029221008 20191022221008 32795 gov. Wrp0Klyv8blIG9OBFRuq6hrfhdFCF8XTLGw3ueck3P+Mfj+POd+2F3f7kQY/ljajT5D8a0ujxjG8 E24uQwiYHEbmFxzDQ6oCzx1h61VBendl7bjOwItm4/rwBEHAChWUwC2W58hppH6WmgIqYwCZQS9w pnjtMuxIH+esgHfWBDI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for CONSUMERSENTINELNETWORK.GOV/DNSKEY
	Received 370 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (370 bytes) ;; HEADER SECTION ;; id = 2458 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns2.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 86400 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 1 609f0e817ed813beed422c7451052b65ed0554d6 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 2 9e8204c63acf2c2563e50d787fa180a4cb730d962adc2f8b16b0dc85089a3f0f ) CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191029221008 20191022221008 32795 gov. Wrp0Klyv8blIG9OBFRuq6hrfhdFCF8XTLGw3ueck3P+Mfj+POd+2F3f7kQY/ljajT5D8a0ujxjG8 E24uQwiYHEbmFxzDQ6oCzx1h61VBendl7bjOwItm4/rwBEHAChWUwC2W58hppH6WmgIqYwCZQS9w pnjtMuxIH+esgHfWBDI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone CONSUMERSENTINELNETWORK.GOV

CONSUMERSENTINELNETWORK.GOV

	Checking DS between GOV and CONSUMERSENTINELNETWORK.GOV
	Query to d.gov-servers.net for CONSUMERSENTINELNETWORK.GOV/DS
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for CONSUMERSENTINELNETWORK.GOV/DS: 'IPv6 transport disabled'
	Received 303 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (303 bytes) ;; HEADER SECTION ;; id = 59133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN DS ;; ANSWER SECTION (3 records) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 1 609f0e817ed813beed422c7451052b65ed0554d6 ) CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 2 9e8204c63acf2c2563e50d787fa180a4cb730d962adc2f8b16b0dc85089a3f0f ) CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191029221008 20191022221008 32795 gov. Wrp0Klyv8blIG9OBFRuq6hrfhdFCF8XTLGw3ueck3P+Mfj+POd+2F3f7kQY/ljajT5D8a0ujxjG8 E24uQwiYHEbmFxzDQ6oCzx1h61VBendl7bjOwItm4/rwBEHAChWUwC2W58hppH6WmgIqYwCZQS9w pnjtMuxIH+esgHfWBDI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for CONSUMERSENTINELNETWORK.GOV in the GOV zone
	DS=24370/SHA-1 has algorithm RSASHA256
	DS=24370/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`CONSUMERSENTINELNETWORK.GOV. 3600 IN RRSIG ( DS 8 2 3600 20191029221008 20191022221008 32795 gov. Wrp0Klyv8blIG9OBFRuq6hrfhdFCF8XTLGw3ueck3P+Mfj+POd+2F3f7kQY/ljajT5D8a0ujxjG8 E24uQwiYHEbmFxzDQ6oCzx1h61VBendl7bjOwItm4/rwBEHAChWUwC2W58hppH6WmgIqYwCZQS9w pnjtMuxIH+esgHfWBDI= )`
	RRSIG=32795 and DNSKEY=32795 verifies the DS RRset
	DS=24370/SHA-1 is now in the chain-of-trust
	`CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 1 609f0e817ed813beed422c7451052b65ed0554d6 )`
	`CONSUMERSENTINELNETWORK.GOV. 3600 IN DS ( 24370 8 2 9e8204c63acf2c2563e50d787fa180a4cb730d962adc2f8b16b0dc85089a3f0f )`
	Query to dns1.l-secb.net for CONSUMERSENTINELNETWORK.GOV/DNSKEY
	Received 1317 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (1317 bytes) ;; HEADER SECTION ;; id = 5327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcwIMSnaZDU2VCU37aSgxCPmwh4XWTdrPP+EOUE1cuAJns4gecu8qKtVJhnxaS518unVR5pF d+qhAVo5pUqhWJ4lIudv0IWIBbVuFmK6tFgHDYfI+RwTFnnJywaQV49cNmXGv9iNx9XkJDLFVCJl 6TmhlXrnq/sIM6Wysmhsj/fJ ) ; Key ID = 48729 CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAalFuuGgW+Izx1z0sBXuUdyRedLfCHHNQ7dytbDacAmOSCGcVC2cfhwYApE/XhdmJkzJdlML asisi11sarrj5TJ9MwDKIR2x+eCUw+8D19tNBWUC52C7gQht9nzIEZpZQMMzLxLe/TcesYbbrN64 i2MZHYqJI4VCZkikrFpUa1Yf ) ; Key ID = 34494 CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbrAaPZBzkrn80ZQU94uUPA4O7T+DN11dMVBsd84MnDhTdZ4b7MR0WP0RnguvdTNaSfKFJzV /cg0OyT26vko2byJHp1IMPVN3ytMYXrFpStUNHGCI/32i9Sfi38uV8HAvEvBZGvCj32hvUE7MbRe xUwH6faSveSkpfbauazsfJL6mCudiM0hqozJkFrb+xTMX2cFZBYgx92STgfGPEJIo1/MgO7xga8a 3fYaG8yulkeKgnIfGCCGwsdYoEGOMbDeTMLmNEI387QFO43vW+kYADO5zPfQO69VcszD1e8zOyfc GGB7MBw6jUyaIrX0WESk5Z5y+KUsXpeXKqD0Af35z5c= ) ; Key ID = 24370 CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025221731 20191018221731 48729 consumersentinelnetwork.gov. eYZ25HRTvWSy2S3VrKBP24RF+UiqRul/lILgSefCqigQaMOXmTxHxYNpHlke/pRbaOH0ad9atjle 6ux9G4f7t1J+gdAw1cvSyYWfImcgVRqQd+u81syIRcUS2iWXo4ccj1dzGjsH4AmlvwUrncQqrljj pO7m3WW8a1f5U1dK1vs= ) CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025221731 20191018221731 34494 consumersentinelnetwork.gov. GSxSF03Wf1HZXpWdAJ/heEqy1Igr3u6uqy2rP+xMzw5SYYsNk6nzmE6nRC7/wGwQAtnLcuV/wrC7 J89w83QjZGfwlZx6mYumJiGSFgQjfcm6UP738zmg1EJKTO0ZfDTMxTdiG4yA6nt2VeHu4lz4Ckxd GmbRYoReGXDcXAjmEYI= ) CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025221731 20191018221731 24370 consumersentinelnetwork.gov. Nt8iJyfw70iRlJK+LWncK5QnSS4RuFLz6C4sovhp2b+g9hEtsf7Jf+mE/0d5c0hHj4kl9ree/aF7 G2fMSv80ugs2m4Eo50mkQ+HSMDCO/ZmkHDDShRXnmUb5Fv9MT5KrTV/qA2o7XxpQf4ywL+GBu0Wm 1dKu76ky9FTQ98pGYnUWJNR87V7/7mHU7BBng3iqKY6y6Uzu8+YMrw1iXfSwVkFwDiYMDIVZPkT8 ZIcINdrNKk6N7dJ04gOy1o8TN+gaqU+DxHnIy4Lg5wp1XBByIGxdLdJ5yS7/PbPCA5UFej8WHvxh Hb7pj4cr7EjkaA7cFk20iUpGeEFZSyPlBhWUnA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for CONSUMERSENTINELNETWORK.GOV
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAcwIMSnaZDU2VCU37aSgxCPmwh4XWTdrPP+EOUE1cuAJns4gecu8qKtVJhnxaS518unVR5pF d+qhAVo5pUqhWJ4lIudv0IWIBbVuFmK6tFgHDYfI+RwTFnnJywaQV49cNmXGv9iNx9XkJDLFVCJl 6TmhlXrnq/sIM6Wysmhsj/fJ ) ; Key ID = 48729`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 256 3 8 AwEAAalFuuGgW+Izx1z0sBXuUdyRedLfCHHNQ7dytbDacAmOSCGcVC2cfhwYApE/XhdmJkzJdlML asisi11sarrj5TJ9MwDKIR2x+eCUw+8D19tNBWUC52C7gQht9nzIEZpZQMMzLxLe/TcesYbbrN64 i2MZHYqJI4VCZkikrFpUa1Yf ) ; Key ID = 34494`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN DNSKEY ( 257 3 8 AwEAAbrAaPZBzkrn80ZQU94uUPA4O7T+DN11dMVBsd84MnDhTdZ4b7MR0WP0RnguvdTNaSfKFJzV /cg0OyT26vko2byJHp1IMPVN3ytMYXrFpStUNHGCI/32i9Sfi38uV8HAvEvBZGvCj32hvUE7MbRe xUwH6faSveSkpfbauazsfJL6mCudiM0hqozJkFrb+xTMX2cFZBYgx92STgfGPEJIo1/MgO7xga8a 3fYaG8yulkeKgnIfGCCGwsdYoEGOMbDeTMLmNEI387QFO43vW+kYADO5zPfQO69VcszD1e8zOyfc GGB7MBw6jUyaIrX0WESk5Z5y+KUsXpeXKqD0Af35z5c= ) ; Key ID = 24370`
	DNSKEY=24370/SEP is now in the chain-of-trust
	DS=24370/SHA-1 verifies DNSKEY=24370/SEP
	DS=24370/SHA-256 verifies DNSKEY=24370/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025221731 20191018221731 48729 consumersentinelnetwork.gov. eYZ25HRTvWSy2S3VrKBP24RF+UiqRul/lILgSefCqigQaMOXmTxHxYNpHlke/pRbaOH0ad9atjle 6ux9G4f7t1J+gdAw1cvSyYWfImcgVRqQd+u81syIRcUS2iWXo4ccj1dzGjsH4AmlvwUrncQqrljj pO7m3WW8a1f5U1dK1vs= )`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025221731 20191018221731 34494 consumersentinelnetwork.gov. GSxSF03Wf1HZXpWdAJ/heEqy1Igr3u6uqy2rP+xMzw5SYYsNk6nzmE6nRC7/wGwQAtnLcuV/wrC7 J89w83QjZGfwlZx6mYumJiGSFgQjfcm6UP738zmg1EJKTO0ZfDTMxTdiG4yA6nt2VeHu4lz4Ckxd GmbRYoReGXDcXAjmEYI= )`
	`CONSUMERSENTINELNETWORK.GOV. 86400 IN RRSIG ( DNSKEY 8 2 86400 20191025221731 20191018221731 24370 consumersentinelnetwork.gov. Nt8iJyfw70iRlJK+LWncK5QnSS4RuFLz6C4sovhp2b+g9hEtsf7Jf+mE/0d5c0hHj4kl9ree/aF7 G2fMSv80ugs2m4Eo50mkQ+HSMDCO/ZmkHDDShRXnmUb5Fv9MT5KrTV/qA2o7XxpQf4ywL+GBu0Wm 1dKu76ky9FTQ98pGYnUWJNR87V7/7mHU7BBng3iqKY6y6Uzu8+YMrw1iXfSwVkFwDiYMDIVZPkT8 ZIcINdrNKk6N7dJ04gOy1o8TN+gaqU+DxHnIy4Lg5wp1XBByIGxdLdJ5yS7/PbPCA5UFej8WHvxh Hb7pj4cr7EjkaA7cFk20iUpGeEFZSyPlBhWUnA== )`
	RRSIG=48729 and DNSKEY=48729 verifies the DNSKEY RRset
	RRSIG=34494 and DNSKEY=34494 verifies the DNSKEY RRset
	RRSIG=24370 and DNSKEY=24370/SEP verifies the DNSKEY RRset
	DNSKEY=48729 is now in the chain-of-trust
	DNSKEY=34494 is now in the chain-of-trust
	Query to dns2.l-secb.net for CONSUMERSENTINELNETWORK.GOV/A
	Error querying dns2.l-secb.net/2001:1900:2268:512:205:130:212:37 for CONSUMERSENTINELNETWORK.GOV/A: 'IPv6 transport disabled'
	Received 954 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (954 bytes) ;; HEADER SECTION ;; id = 11104 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102201 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029152042 20191022152042 48729 consumersentinelnetwork.gov. tamXvsPsQVSRyy0XmiaQAuABs7ukYS+FzdpulhTmxdHcG2mWKO6r9sqfhbUhGM1gTesx9Y5E1Q4h lljO3CB5ItrBUn872vXAsoTEklZ+JOOk38jQ+6vR2GN52kIpp7v7btw2xVtr0hwZMnkijGkMvN2S yyzLfuZvRbr0PJVZlkI= ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029152042 20191022152042 34494 consumersentinelnetwork.gov. HJ4ICEVAuIj+UqdyucD1WQC6rBahrofvocgAhEfqWW0nz5c4dwWJIlLGLHp4PKceexK2CMZBLkZS XCdwyDanZ8c0P2WiV4IqrcI9BTy93r8Vb1wh27fqvb/liSWlRnzvIgTmLxilBDuTgbzJ9YcAbzNm VuFo+RPL60/ZIFK6Ako= ) r4irm93jb9f1hh2nde0ejmqtckapbbse.CONSUMERSENTINELNETWORK.GOV. 900 IN NSEC3 ( 1 0 1 b7815277ada00c3f r4irm93jb9f1hh2nde0ejmqtckapbbsf NS SOA RRSIG DNSKEY NSEC3PARAM ) r4irm93jb9f1hh2nde0ejmqtckapbbse.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20191028071638 20191021071638 48729 consumersentinelnetwork.gov. xH7Z4UD6rbrer7MoBf71fHSnXuFzSP3ZdZV0CwiaV5gpd7bkCiv5ZnSqk10Gh3u1RC8NV3L71tgv wm+Cf/KFIspeCixSz/eYJrF+7wS8Jc1J5fVfKTpLshjeYtJrqGQL8lyQVryKQOTtjAXPdox0PGkn yGNEA2cdnOVqPa6yZGg= ) r4irm93jb9f1hh2nde0ejmqtckapbbse.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20191025222541 20191018222541 34494 consumersentinelnetwork.gov. SuGlfIxidN3EkqEvFGLkVyKSmdGKAAHZs9VJvbD4LSV23a7fbmyKSjyKw3XgLvRIu61zUhVs1Ez5 spHBbde/siGXjZ/PywACzj8O7rYAIrAoTqvlTOtu9Pbx+vXla2I1GoOEcjC9eyGMy0tv+eUT5ahN Ge5IQ/X+C0wlWHylqT4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	CONSUMERSENTINELNETWORK.GOV is authoritative for CONSUMERSENTINELNETWORK.GOV
	Found RRSIG signed by consumersentinelnetwork.gov zone
	Query to dns2.l-secb.net for CONSUMERSENTINELNETWORK.GOV/SOA
	Received 959 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (959 bytes) ;; HEADER SECTION ;; id = 51083 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102201 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20191030020035 20191023020035 48729 consumersentinelnetwork.gov. MkJBxPlmPWn84jJKvSJEx4RynoOJB84f00IWkANI3dCtx63WstVrNmBJJxx6SdMUcDQ7JhecSjlV fHzeO9sVtxqBExY5fw6zobJNo+ps5nuOnJNZIj4usjYcNUtB6nhOxfNm/YKWBtg/nY8bh4Bv+qmG 3kFk+6h/504Hd8A7o2U= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20191030020035 20191023020035 34494 consumersentinelnetwork.gov. KCspWBfrzvon670yolMxHypfRFmNdineg+lDI0FCrbQMygqc7mcXNboanxRP6d4XbfpyRl+vFfrh GxcJr2wqW4XJLiExagMgi080OGgcTLQBrU1or/FwlNcW50UUzDqAor5vcRchuP5AzS2A2wI4A8NZ 1BiAnX8gecWNTBCdx+U= ) ;; AUTHORITY SECTION (4 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20191028211216 20191021211216 48729 consumersentinelnetwork.gov. dkJuhiJnCNEWFwdA2xtMW8gZ24UCR/pN3irQpJxVrtvTsbx+KDDJMkzAZuWvblI0zWiH+6K3iiQl OlPcvY2yGWA7UVU6l3XT9mil16O0Mj44+TDmGEUwcD3G90TZWP6AzNHuXHLHjIjlGiGlBDBuXyZZ DmACeor+qxhdeXKMqLw= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20191026052924 20191019052924 34494 consumersentinelnetwork.gov. jaRfqPrtP5cVmAElGKCqUNpatusLbOjhEPiWW2WqYaHdeLO1xDJg7hcDDDcG/SbV4+spNVxr6lMG 25ZXOoRJ9trRVUsu8nG+pefu0P/RP3vtTnSuynscogRyhGOQQyTJggbOR3J2LPr8xWMm6DUyZLe9 7osMlpdIjr0W/dVa1Dc= ) ;; ADDITIONAL SECTION (4 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns1.l-secb.net for CONSUMERSENTINELNETWORK.GOV/SOA
	Received 959 bytes from 198.77.70.37
	;; Answer received from 198.77.70.37 (959 bytes) ;; HEADER SECTION ;; id = 4569 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102201 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20191029174459 20191022174459 48729 consumersentinelnetwork.gov. Yr7YUw5sZ8VV4jzQAsYUoVwTXGNKi5pNvRd/IyFFjvVI7dX3Trx4iPTSDrG9NxgalNhtW+j2JVjI U4nQe/j95eCmleFLpsR/Zi5jkaVHTyDt/vUHlwG1R2z0eO658bBiwXlKI8iwAIYaRyWdQTrrY0iv KMDo6VOIWJJvGL5p6EM= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20191029174459 20191022174459 34494 consumersentinelnetwork.gov. OKg3upyr9Ngx0S+T5YsBkrSTEZvm+m7UFTe29EWs6zFa3Nqfh+bqqkncApJlIkdZR8ox1G2pvx/x 7OAJOBurIYT2uYNPDaQrREgjHC+WOkUsyKyvSMjBOJWoX4gj4/Kf8E6pyhMeDgo6cqvhcWj+eISA 5tvqTT8JMFgt8U+XQsQ= ) ;; AUTHORITY SECTION (4 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20191026134316 20191019134316 48729 consumersentinelnetwork.gov. U6SgsrEj7SHNQaOnP+2aYdlSfZskPbe7IM5LYjS0KrQnu5XQ8ktBO7cIPKWP26TqfwWr5DBMV9ud DKLN8H05JvnQ13QDZ0yyZ8xTIQbDEfsdtrCxBkK4ASfR5ijiuKDKNy6Tj6mdd9l4pKT9y2MOik0v p4h4ojAO2pUpEamnEYU= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20191025223513 20191018223513 34494 consumersentinelnetwork.gov. hA7Mqt0jg3zKVMn+CdcdKiEcle919x4efB3d6gPtb6ZlPa7AIM9xX1CFzVylA8Bu1+xdKu81Nv6C dK/T5yZq2JPfTN34811uZk+kFF9BTxhmhuzOiyZpJrk1v8PLV1CdCJWPU+U2AJjlgOAgS8W19PAo VRQAKRC15EqrtHDNUu8= ) ;; ADDITIONAL SECTION (4 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns3.l-secb.net for CONSUMERSENTINELNETWORK.GOV/SOA
	Error querying dns3.l-secb.net/2600:1f14:a2e:4b00:35:163:67:210 for CONSUMERSENTINELNETWORK.GOV/SOA: 'IPv6 transport disabled'
	Received 959 bytes from 35.163.67.210
	;; Answer received from 35.163.67.210 (959 bytes) ;; HEADER SECTION ;; id = 62356 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN SOA ;; ANSWER SECTION (3 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102201 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20191030000210 20191023000210 48729 consumersentinelnetwork.gov. NTf2g9hoIheRv7eSJltRvBzY1Q8Mgekvl0cyVG4hieuzCmD3ODNXna231rypknX/bfJc41hnDBE+ i0ifeE0yzjtShS4vd5ODvgcqrMmkqnTKCVYULM3/QLGzHpt+5rhGVWBZHCxMnYyWMd8Op03ifX+T 8xI6adJjCHW0JBkHdsY= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( SOA 8 2 43200 20191030000210 20191023000210 34494 consumersentinelnetwork.gov. BQoJDa3DGE0ultSGTOrnu52p7uE3bReif1dcdBE656Me2whV7/wtUxbMwo2MxfMLGyR2g2gQQOsX i40S8793CJvwkpxO/94TeHyRV+nokr86/LnXStSanspRpL9Mj0RthwWBM1Tvzfye61e4+e5nJg8Q 2eO0+7xbtwKACfWnZeg= ) ;; AUTHORITY SECTION (4 records) CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns1.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN NS dns3.l-secb.net. CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20191026155505 20191019155505 48729 consumersentinelnetwork.gov. LT+X2Gn19VhosRqULQ2O7TKuiwNDB8C9jN4WxNWcecgk2nc3meTqEwJWeFJ9OAz462ncG8oRNu4a CDhxrOGt6gvjl4ydqlL186kykjLe2XE5qLwlmlJFHmY7M9Shlj6xUSNP9qPy3skAp7sq31n4f/vH 3zf43abblvH9nNhWJbk= ) CONSUMERSENTINELNETWORK.GOV. 43200 IN RRSIG ( NS 8 2 43200 20191025225023 20191018225023 34494 consumersentinelnetwork.gov. Jt8clg264WfSsvsuLWAaBWFtFMhIS/ZQvtvVeQ0ySc3W9bijzfiHZIEi8hrVgmXDbYVThw7P+tpK y9zqsT3LXGZPlrYDHsf1xd7y/kHo8saSuaZsqZX0MsTcaFWdThYHoW2CAzgWjcJJDxquOaCR3PTa lTv2E8GAYXKAlvUDs5w= ) ;; ADDITIONAL SECTION (4 records) dns1.l-secb.net. 43200 IN A 198.77.70.37 dns3.l-secb.net. 43200 IN A 35.163.67.210 dns3.l-secb.net. 43200 IN AAAA 2600:1f14:a2e:4b00:35:163:67:210 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to dns2.l-secb.net for CONSUMERSENTINELNETWORK.GOV/A
	Received 954 bytes from 205.130.212.37
	;; Answer received from 205.130.212.37 (954 bytes) ;; HEADER SECTION ;; id = 17699 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; CONSUMERSENTINELNETWORK.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CONSUMERSENTINELNETWORK.GOV. 900 IN SOA ( dns1.l-secb.net. hostmaster.l-secb.net. 2019102201 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029144042 20191022144042 48729 consumersentinelnetwork.gov. NuizyiLfQT62l0tipM5WxadyIZXYVOZq3Ubsnh3XtfkLsjK72mABIG2L5d4oS9fh2alEKZEsUJV1 mSb5PgKaBC3uXj8pgcptMpGSDvz3DKcxoZfVmpH3q1+wuqqmjWbDb4JuDrZ4WYVmdI2i8rNux+vD s7IyAlqowTrfEOVyZmE= ) CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029144042 20191022144042 34494 consumersentinelnetwork.gov. mz6qV6mpAy3N2DUEp2xCfZC5+8wuPiG6fxe4be51OudLbcSnSKXSDngg1eFPEk9Pm+OrTJqCD44A jYL6oY4KROpurZcXgYjimgJ9sX0QDBBR2J3gmBKoiaUjd886BN8u8qk+ZpdxOAEIXejXqlP4howS F5MvTjI0dQmA/eqKDLM= ) 863gl8v6c5uj7f3qvi67l6nqeei5v1sg.CONSUMERSENTINELNETWORK.GOV. 900 IN NSEC3 ( 1 0 1 667db2881593418c 863gl8v6c5uj7f3qvi67l6nqeei5v1sh NS SOA RRSIG DNSKEY NSEC3PARAM ) 863gl8v6c5uj7f3qvi67l6nqeei5v1sg.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20191028090407 20191021090407 48729 consumersentinelnetwork.gov. VLLONkQs6+meYGLvf4vnVODpYHSiZArlPq0dKLYM7KhIRekExX4FbZLW2D64dbWVrAbn4YqFRf6h mvqhHYzUmSz2RfDUBlJDA94oEX0lLqBPih7aO0aSpNsVNrBjlut1NVBXijGnyktehgZidfw0TeDC FFTqB89yJUIc0+6YUrw= ) 863gl8v6c5uj7f3qvi67l6nqeei5v1sg.CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20191025222541 20191018222541 34494 consumersentinelnetwork.gov. Pin4fwytClr5ozLthDFMMHhui/ydze3xroKZ6TwMvD92/gSWxIRSMHNs+v37ivFP030kWDhWWYKj cC00XVLrPBy+EQqx7pmghtYhrMODfOdz5esSX+1SPuyNEXjPAIUHojsaIDRrbCct5FaRWwkBWkIX BUWYet4STd+V+UJCBWk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 2 RRSIGs over SOA RRset
	`CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029152042 20191022152042 48729 consumersentinelnetwork.gov. tamXvsPsQVSRyy0XmiaQAuABs7ukYS+FzdpulhTmxdHcG2mWKO6r9sqfhbUhGM1gTesx9Y5E1Q4h lljO3CB5ItrBUn872vXAsoTEklZ+JOOk38jQ+6vR2GN52kIpp7v7btw2xVtr0hwZMnkijGkMvN2S yyzLfuZvRbr0PJVZlkI= )`
	`CONSUMERSENTINELNETWORK.GOV. 900 IN RRSIG ( SOA 8 2 900 20191029152042 20191022152042 34494 consumersentinelnetwork.gov. HJ4ICEVAuIj+UqdyucD1WQC6rBahrofvocgAhEfqWW0nz5c4dwWJIlLGLHp4PKceexK2CMZBLkZS XCdwyDanZ8c0P2WiV4IqrcI9BTy93r8Vb1wh27fqvb/liSWlRnzvIgTmLxilBDuTgbzJ9YcAbzNm VuFo+RPL60/ZIFK6Ako= )`
	RRSIG=48729 and DNSKEY=48729 verifies the SOA RRset
	RRSIG=34494 and DNSKEY=34494 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test CONSUMERSENTINELNETWORK.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: