DNSSEC Analyzer - IRSNET.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-20 03:06:23 UTC, NTP stratum 4

Analyzing DNSSEC problems for IRSNET.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 53280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190502000000 20190411000000 20326 . kquHnaziV2mG5TuwV6/NotYIe6Jkf2tLUNkCkR89a97gGLzCVZGtCrq5qLM+pvgru2Jji3h4w7dI h1oalr3fMmrAuX+hcbBYI2H/JzfTCvo1i3gZf/ZYIelFSD19cjgFaGl7sxXcLGuMXQaozHJ4K46l VEClvyy4crkbAuSxA4045om/9eRfxw+C2OMHhrZJIu59m9+oK8kiaxiAq/cufmQI4eCLJtfwVC6X f2H+jkoXQHklFvdrCJvw+WiXQezmN2rGy2ihUda3DBEcTujyhG1a6oqR71EF6dyjhv8Lqn8vFv78 XD54lrf8eCj4RZK69Nl3pQpNdRYFcAXLPr4psg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190502000000 20190411000000 20326 . kquHnaziV2mG5TuwV6/NotYIe6Jkf2tLUNkCkR89a97gGLzCVZGtCrq5qLM+pvgru2Jji3h4w7dI h1oalr3fMmrAuX+hcbBYI2H/JzfTCvo1i3gZf/ZYIelFSD19cjgFaGl7sxXcLGuMXQaozHJ4K46l VEClvyy4crkbAuSxA4045om/9eRfxw+C2OMHhrZJIu59m9+oK8kiaxiAq/cufmQI4eCLJtfwVC6X f2H+jkoXQHklFvdrCJvw+WiXQezmN2rGy2ihUda3DBEcTujyhG1a6oqR71EF6dyjhv8Lqn8vFv78 XD54lrf8eCj4RZK69Nl3pQpNdRYFcAXLPr4psg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to j.root-servers.net for IRSNET.GOV/A
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for IRSNET.GOV/A: 'IPv6 transport disabled'
	Received 665 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (665 bytes) ;; HEADER SECTION ;; id = 23790 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190502170000 20190419160000 25266 . JNR110HTPcViZ86tz1CmK3VDl+PYDeeLUuYbewYRH+uzpdEEI7sOoscfZyxYqJeqdhVc22/77fWK Klso1LC2gtXreVX+MMNi9vu4NMeboI5L9VeMc1wN7gjwJpbY4hLbRM2lcwpJjEI57ZjOIxk/WH5e HGF6GKSt3F43iHp5F3jjYLHd4uVZFbnSetTKA86TF8VZB1HLK3lOCCjRUIU1B2mZ60SO3ondbGTU BAxYe4StheLZ21xzAlBt8m6aSWQCg8ia9xoup3woUb8P8DpBbvKAj5/BjVx72r1kTp0/U42JpZpA o7nJJOSrqvjR46Iy8W7K/UvgccuJTyZOCOelIA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.root-servers.net for GOV/DNSKEY
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (661 bytes) ;; HEADER SECTION ;; id = 32413 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190502170000 20190419160000 25266 . JNR110HTPcViZ86tz1CmK3VDl+PYDeeLUuYbewYRH+uzpdEEI7sOoscfZyxYqJeqdhVc22/77fWK Klso1LC2gtXreVX+MMNi9vu4NMeboI5L9VeMc1wN7gjwJpbY4hLbRM2lcwpJjEI57ZjOIxk/WH5e HGF6GKSt3F43iHp5F3jjYLHd4uVZFbnSetTKA86TF8VZB1HLK3lOCCjRUIU1B2mZ60SO3ondbGTU BAxYe4StheLZ21xzAlBt8m6aSWQCg8ia9xoup3woUb8P8DpBbvKAj5/BjVx72r1kTp0/U42JpZpA o7nJJOSrqvjR46Iy8W7K/UvgccuJTyZOCOelIA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to b.root-servers.net for GOV/DS
	Received 406 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (406 bytes) ;; HEADER SECTION ;; id = 59832 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190502170000 20190419160000 25266 . JNR110HTPcViZ86tz1CmK3VDl+PYDeeLUuYbewYRH+uzpdEEI7sOoscfZyxYqJeqdhVc22/77fWK Klso1LC2gtXreVX+MMNi9vu4NMeboI5L9VeMc1wN7gjwJpbY4hLbRM2lcwpJjEI57ZjOIxk/WH5e HGF6GKSt3F43iHp5F3jjYLHd4uVZFbnSetTKA86TF8VZB1HLK3lOCCjRUIU1B2mZ60SO3ondbGTU BAxYe4StheLZ21xzAlBt8m6aSWQCg8ia9xoup3woUb8P8DpBbvKAj5/BjVx72r1kTp0/U42JpZpA o7nJJOSrqvjR46Iy8W7K/UvgccuJTyZOCOelIA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	DS=7698/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20190502170000 20190419160000 25266 . JNR110HTPcViZ86tz1CmK3VDl+PYDeeLUuYbewYRH+uzpdEEI7sOoscfZyxYqJeqdhVc22/77fWK Klso1LC2gtXreVX+MMNi9vu4NMeboI5L9VeMc1wN7gjwJpbY4hLbRM2lcwpJjEI57ZjOIxk/WH5e HGF6GKSt3F43iHp5F3jjYLHd4uVZFbnSetTKA86TF8VZB1HLK3lOCCjRUIU1B2mZ60SO3ondbGTU BAxYe4StheLZ21xzAlBt8m6aSWQCg8ia9xoup3woUb8P8DpBbvKAj5/BjVx72r1kTp0/U42JpZpA o7nJJOSrqvjR46Iy8W7K/UvgccuJTyZOCOelIA== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	`gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	Query to a.gov-servers.net for GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 889 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (889 bytes) ;; HEADER SECTION ;; id = 24022 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (4 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. ocIs3qBX77aDfCB2wAonk4kOqze7WaOKI/7LzbvuBdk5MVppdtS0gPFNZe8ipffRxym+rApFZHQA 9K/V52gv58SgVLlp0yLuytomPI0/ut/a+ZRzxNOJLue+9OzwKLYskFdMeZ2TaBaocBL2kdy6hZUw zbh8fobHnwCldcCUa6hwYQ3h+zwcIJSNVLYWRDymNcsEXO9cGeNK9A4WWkxS2ZTCZ5DbEWhjz6Sg iEyebGW6VCRKhgRLhEY39YbDtAOHwEAiIyvzYcOHCelHIzFgQjUUH4znPy97mt9BBMsX1lusKrqt 2FzZKzR8RM7k911VKhSs8iLtvc8/u9R00fxIgg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQO1oAFyB/QSuf32vdl3Yp+o83rKLBdvjsz13AdVp8EooKwa6DL4D8G+e3PanKAJyWEiRpNQIAl2 Ra6JuC7DCiEPBziclmFygf2XGdY4qirPqVemcHHKNoVIMNUteughuiPaqlFY8gTZajQ02ZizqiYK +LRxpPs/ePcbETPT3oB9Ew== ) ; Key ID = 28157`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. ocIs3qBX77aDfCB2wAonk4kOqze7WaOKI/7LzbvuBdk5MVppdtS0gPFNZe8ipffRxym+rApFZHQA 9K/V52gv58SgVLlp0yLuytomPI0/ut/a+ZRzxNOJLue+9OzwKLYskFdMeZ2TaBaocBL2kdy6hZUw zbh8fobHnwCldcCUa6hwYQ3h+zwcIJSNVLYWRDymNcsEXO9cGeNK9A4WWkxS2ZTCZ5DbEWhjz6Sg iEyebGW6VCRKhgRLhEY39YbDtAOHwEAiIyvzYcOHCelHIzFgQjUUH4znPy97mt9BBMsX1lusKrqt 2FzZKzR8RM7k911VKhSs8iLtvc8/u9R00fxIgg== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=28157 is now in the chain-of-trust
	DNSKEY=43583 is now in the chain-of-trust
	Query to c.gov-servers.net for IRSNET.GOV/A
	Received 550 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (550 bytes) ;; HEADER SECTION ;; id = 16952 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) IRSNET.GOV. 86400 IN NS ns1.irs.GOV. IRSNET.GOV. 86400 IN NS ns2.irs.GOV. IRSNET.GOV. 86400 IN NS ns3.irs.GOV. IRSNET.GOV. 86400 IN NS ns4.irs.GOV. IRSNET.GOV. 3600 IN DS ( 29905 8 2 335b670614c985a0ca97ebed8821b75f818456eb18a9422e5963ca0c69d3e65a ) IRSNET.GOV. 3600 IN DS ( 36691 8 2 098e3589db90636a68a604e66b674de1801a4f6291e2d94ca733126358f1cd71 ) IRSNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190426221007 20190419221007 43583 gov. Gtz8i7ADsPF5BXmecEvU6Op1TUlIg4NLvHxCbMkFaJbX3XsD4Gyef1lOLmlhhDhW6MdjLmtddI8E oJk3YX2EaBiuiNh0mTrqHJ3ZcbpmTLwb5XXJrZqTtNxnj4Y56hgdGmbjPQqsYNX5Vzo/JxkTJO38 MAga0ZjDtG5o9QoA8Oo= ) ;; ADDITIONAL SECTION (9 records) ns1.irs.GOV. 86400 IN A 152.216.7.164 ns2.irs.GOV. 86400 IN A 152.216.7.165 ns3.irs.GOV. 86400 IN A 152.216.11.132 ns4.irs.GOV. 86400 IN A 152.216.11.133 ns1.irs.GOV. 86400 IN AAAA 2610:30:4000:53::90 ns2.irs.GOV. 86400 IN AAAA 2610:30:4000:53::91 ns3.irs.GOV. 86400 IN AAAA 2610:30:2000:53::90 ns4.irs.GOV. 86400 IN AAAA 2610:30:2000:53::91 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.gov-servers.net for IRSNET.GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for IRSNET.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 550 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (550 bytes) ;; HEADER SECTION ;; id = 62396 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) IRSNET.GOV. 86400 IN NS ns1.irs.GOV. IRSNET.GOV. 86400 IN NS ns2.irs.GOV. IRSNET.GOV. 86400 IN NS ns3.irs.GOV. IRSNET.GOV. 86400 IN NS ns4.irs.GOV. IRSNET.GOV. 3600 IN DS ( 29905 8 2 335b670614c985a0ca97ebed8821b75f818456eb18a9422e5963ca0c69d3e65a ) IRSNET.GOV. 3600 IN DS ( 36691 8 2 098e3589db90636a68a604e66b674de1801a4f6291e2d94ca733126358f1cd71 ) IRSNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190426221007 20190419221007 43583 gov. Gtz8i7ADsPF5BXmecEvU6Op1TUlIg4NLvHxCbMkFaJbX3XsD4Gyef1lOLmlhhDhW6MdjLmtddI8E oJk3YX2EaBiuiNh0mTrqHJ3ZcbpmTLwb5XXJrZqTtNxnj4Y56hgdGmbjPQqsYNX5Vzo/JxkTJO38 MAga0ZjDtG5o9QoA8Oo= ) ;; ADDITIONAL SECTION (9 records) ns1.irs.GOV. 86400 IN A 152.216.7.164 ns2.irs.GOV. 86400 IN A 152.216.7.165 ns3.irs.GOV. 86400 IN A 152.216.11.132 ns4.irs.GOV. 86400 IN A 152.216.11.133 ns1.irs.GOV. 86400 IN AAAA 2610:30:4000:53::90 ns2.irs.GOV. 86400 IN AAAA 2610:30:4000:53::91 ns3.irs.GOV. 86400 IN AAAA 2610:30:2000:53::90 ns4.irs.GOV. 86400 IN AAAA 2610:30:2000:53::91 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone IRSNET.GOV

IRSNET.GOV

	Checking DS between GOV and IRSNET.GOV
	Query to c.gov-servers.net for IRSNET.GOV/DS
	Received 298 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (298 bytes) ;; HEADER SECTION ;; id = 59580 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN DS ;; ANSWER SECTION (3 records) IRSNET.GOV. 3600 IN DS ( 29905 8 2 335b670614c985a0ca97ebed8821b75f818456eb18a9422e5963ca0c69d3e65a ) IRSNET.GOV. 3600 IN DS ( 36691 8 2 098e3589db90636a68a604e66b674de1801a4f6291e2d94ca733126358f1cd71 ) IRSNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190426221007 20190419221007 43583 gov. Gtz8i7ADsPF5BXmecEvU6Op1TUlIg4NLvHxCbMkFaJbX3XsD4Gyef1lOLmlhhDhW6MdjLmtddI8E oJk3YX2EaBiuiNh0mTrqHJ3ZcbpmTLwb5XXJrZqTtNxnj4Y56hgdGmbjPQqsYNX5Vzo/JxkTJO38 MAga0ZjDtG5o9QoA8Oo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for IRSNET.GOV in the GOV zone
	DS=29905/SHA-256 has algorithm RSASHA256
	DS=36691/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`IRSNET.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190426221007 20190419221007 43583 gov. Gtz8i7ADsPF5BXmecEvU6Op1TUlIg4NLvHxCbMkFaJbX3XsD4Gyef1lOLmlhhDhW6MdjLmtddI8E oJk3YX2EaBiuiNh0mTrqHJ3ZcbpmTLwb5XXJrZqTtNxnj4Y56hgdGmbjPQqsYNX5Vzo/JxkTJO38 MAga0ZjDtG5o9QoA8Oo= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=29905/SHA-256 is now in the chain-of-trust
	DS=36691/SHA-256 is now in the chain-of-trust
	`IRSNET.GOV. 3600 IN DS ( 29905 8 2 335b670614c985a0ca97ebed8821b75f818456eb18a9422e5963ca0c69d3e65a )`
	`IRSNET.GOV. 3600 IN DS ( 36691 8 2 098e3589db90636a68a604e66b674de1801a4f6291e2d94ca733126358f1cd71 )`
	Query to ns1.irs.GOV for IRSNET.GOV/DNSKEY
	Error querying ns1.irs.GOV/2610:30:4000:53:0:0:0:90 for IRSNET.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1717 bytes from 152.216.7.164
	;; Answer received from 152.216.7.164 (1717 bytes) ;; HEADER SECTION ;; id = 59627 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN DNSKEY ;; ANSWER SECTION (6 records) IRSNET.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAdlqSDBBgVVH7iYsW1sNUg9RS96UnxGlLv6ogjhIJL3+SEATe8I/LtjbUJ9+CFAiqUji8TXn PdFhwoH6tJ3q+pIPZY75oUc+nk0k2NvcWE86ognzqaVMxUhVMExvpNO7dBwWjBaYqRWdjXgu0O4k 4lBt8o9fhjt0TOOOblqfhoUuzbK8hPyCYl23jTA5c6wyuiv3y9KpaYyK9zmBueXakGgkhFU7gaYu 3XZgGG0bgRBUB86Gib30kCwyemp06c3sz30BFXOkwLpzjgqeYRJSJZ5EhXmy7WO5NwdxkoYCNsf+ fVLVAzyTNheoCdO6l5Vb/ED43avgPQ8Jj6KJD1pBKus= ) ; Key ID = 43320 IRSNET.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAfIqURAK0IzwiYrq7LED3HySGzykgEdem7tIwNytItqfgLIOxIUgCJ69z7LykvibX1VWfrD9 K3TPdgLv75EXUa7KNsqY4esebYw1BqCMuSUHZ+n7BSzWgCWJvWoCuoNCZ9lR3RkGR53R4xNmX8Xq L4knxZ85TzfDIOkA+137mnsUkveDM39N67CL9p9TzE/zh8HINnW6Z7A1eqtP3tas4jauh6nvarSI S/PqaAYWP/q3nA/8Yh/fUVvrvClq5ChSRonvLu1lLdws7B7ahddUjtZ0bHMr39cm6RguTKct0nVG YbY5X1pJMUY1lztn06LdW+jHhM2SRU941+XMWsDGGYE= ) ; Key ID = 7356 IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAbtaAGarXDriltU3DzS7TBDLw38OtwF1nTNwei4PncJiCmD3faUK+FGKmfi2sM1oiuxEWlQa C6MQbcqgRhdoDizK3ouKE4qYbimLU/IdqLFA2J90xNEzaDetudjbw0S/wODVo26/KUEofaYmx0ne K/uF8AkEXH9PZ25RAVKOXWfQF+eYAuj/KbNGS0HqleW0pwStPaCtlKacrkSugi2dy+MGTgfygBrg VDMvpYnaOxxPfHkpF/nGtRChgsw+qm1QmOKFTS1orPngcf9rL6tMKN78H8H17QY4+DWtTSSl9Syv r56tGdfmHnMtsSlvnhvYl6LVx7jgRX2ZkgbxGfIMtZ0= ) ; Key ID = 36691 IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAcoZJddJHkn70O/WK8l1AOZIs2uxH8rNqHy+VyPexFHaPwVZaKoTuIlKtJqnWaRtOd70WDp0 Q+XOTjbAP0c7Na/TONVxEUjsk7xRpqOP6YVWuTvVPstykhvoiWBLxrcae190djnpb6V+Uu2lYNfR mt1acPWHI2VxYHqpSNWZUGTdW3F6uv95y/BNzrhrq9ua/ike/tJORbh6POL+MQRWJ3Q4bAYADoT8 fEtTSuQimaG8Kvw/vCB66UzBEMPLxPxbFEtgQV2G9BjpvijLQ1Bxpfc20SRHbfqRVYf/sDD28kN1 8Ulq22sjwYoVG8jGLoHIrCk8MCXHT8SyG2hAMP/TeBk= ) ; Key ID = 57982 IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAe63SyHvRtt+nartdII7ZLBeuoHcyefn2o47e//rkB/+QXbICG3UKCHN793hfzRXdPA2SJkn 3ljoH+KEHjXwEpQXCtL2YqritFXCh1mQQ+N/YHzkPzDmIGpsLJNUngqo/L28FO3VNEZgrne11Jy6 HbbFLB1eQUMUlUz0mKz+JZuK2Yol5rAcGmzlOBFD80jp0Mq/FZZbSm1a6APyH8x+X6TtwUEvsLb+ b6xKQeU8kXEqXnmLxIyKfHL4xrtApjm0KM4Jb4xJoVThIldW85FIHGFuXa/QzTyiNT8gcC07rFaD aoS6Qu4UnbhEHDSrX0yiOUMV4S3vRzQiq/Ar1Z3Y4pU= ) ; Key ID = 29905 IRSNET.GOV. 14400 IN RRSIG ( DNSKEY 8 2 14400 20190426030225 20190419020225 29905 irsnet.gov. JColHXd2MxUMFUMHap69Ri1CTL8H5yVMGxE0lICd/sKINmPnSpV2PX9rP74QOjlyDY/YDEGLIZ4O ovWkQm990N6DOo5sAe37Mg9gusksxo4AT4kXwNUumdbNL9UUK5wccL6AzG4Q1chbW9yKGy4MdzZd antveds4n99EvNvGqmDryfLQM2QEDkjwoS5Dqsaq5V7B2xfqU8CSzpaLnbKnQdUUen63Tj4Qpk/Z kW4eSfqjhjgQuPBjFKylNP6rXa8KQmIwBxY9WRhRhvDCDQXwi6v8cHJJvoO9u9idD7JokI076OPz 6oLmpuHUAwbSmBUyAkJE29M+3k5NXFtCq0Pqlw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	Found 5 DNSKEY records for IRSNET.GOV
	`IRSNET.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAdlqSDBBgVVH7iYsW1sNUg9RS96UnxGlLv6ogjhIJL3+SEATe8I/LtjbUJ9+CFAiqUji8TXn PdFhwoH6tJ3q+pIPZY75oUc+nk0k2NvcWE86ognzqaVMxUhVMExvpNO7dBwWjBaYqRWdjXgu0O4k 4lBt8o9fhjt0TOOOblqfhoUuzbK8hPyCYl23jTA5c6wyuiv3y9KpaYyK9zmBueXakGgkhFU7gaYu 3XZgGG0bgRBUB86Gib30kCwyemp06c3sz30BFXOkwLpzjgqeYRJSJZ5EhXmy7WO5NwdxkoYCNsf+ fVLVAzyTNheoCdO6l5Vb/ED43avgPQ8Jj6KJD1pBKus= ) ; Key ID = 43320`
	`IRSNET.GOV. 14400 IN DNSKEY ( 256 3 8 AwEAAfIqURAK0IzwiYrq7LED3HySGzykgEdem7tIwNytItqfgLIOxIUgCJ69z7LykvibX1VWfrD9 K3TPdgLv75EXUa7KNsqY4esebYw1BqCMuSUHZ+n7BSzWgCWJvWoCuoNCZ9lR3RkGR53R4xNmX8Xq L4knxZ85TzfDIOkA+137mnsUkveDM39N67CL9p9TzE/zh8HINnW6Z7A1eqtP3tas4jauh6nvarSI S/PqaAYWP/q3nA/8Yh/fUVvrvClq5ChSRonvLu1lLdws7B7ahddUjtZ0bHMr39cm6RguTKct0nVG YbY5X1pJMUY1lztn06LdW+jHhM2SRU941+XMWsDGGYE= ) ; Key ID = 7356`
	`IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAbtaAGarXDriltU3DzS7TBDLw38OtwF1nTNwei4PncJiCmD3faUK+FGKmfi2sM1oiuxEWlQa C6MQbcqgRhdoDizK3ouKE4qYbimLU/IdqLFA2J90xNEzaDetudjbw0S/wODVo26/KUEofaYmx0ne K/uF8AkEXH9PZ25RAVKOXWfQF+eYAuj/KbNGS0HqleW0pwStPaCtlKacrkSugi2dy+MGTgfygBrg VDMvpYnaOxxPfHkpF/nGtRChgsw+qm1QmOKFTS1orPngcf9rL6tMKN78H8H17QY4+DWtTSSl9Syv r56tGdfmHnMtsSlvnhvYl6LVx7jgRX2ZkgbxGfIMtZ0= ) ; Key ID = 36691`
	`IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAcoZJddJHkn70O/WK8l1AOZIs2uxH8rNqHy+VyPexFHaPwVZaKoTuIlKtJqnWaRtOd70WDp0 Q+XOTjbAP0c7Na/TONVxEUjsk7xRpqOP6YVWuTvVPstykhvoiWBLxrcae190djnpb6V+Uu2lYNfR mt1acPWHI2VxYHqpSNWZUGTdW3F6uv95y/BNzrhrq9ua/ike/tJORbh6POL+MQRWJ3Q4bAYADoT8 fEtTSuQimaG8Kvw/vCB66UzBEMPLxPxbFEtgQV2G9BjpvijLQ1Bxpfc20SRHbfqRVYf/sDD28kN1 8Ulq22sjwYoVG8jGLoHIrCk8MCXHT8SyG2hAMP/TeBk= ) ; Key ID = 57982`
	`IRSNET.GOV. 14400 IN DNSKEY ( 257 3 8 AwEAAe63SyHvRtt+nartdII7ZLBeuoHcyefn2o47e//rkB/+QXbICG3UKCHN793hfzRXdPA2SJkn 3ljoH+KEHjXwEpQXCtL2YqritFXCh1mQQ+N/YHzkPzDmIGpsLJNUngqo/L28FO3VNEZgrne11Jy6 HbbFLB1eQUMUlUz0mKz+JZuK2Yol5rAcGmzlOBFD80jp0Mq/FZZbSm1a6APyH8x+X6TtwUEvsLb+ b6xKQeU8kXEqXnmLxIyKfHL4xrtApjm0KM4Jb4xJoVThIldW85FIHGFuXa/QzTyiNT8gcC07rFaD aoS6Qu4UnbhEHDSrX0yiOUMV4S3vRzQiq/Ar1Z3Y4pU= ) ; Key ID = 29905`
	DNSKEY=36691/SEP is now in the chain-of-trust
	DS=36691/SHA-256 verifies DNSKEY=36691/SEP
	DNSKEY=29905/SEP is now in the chain-of-trust
	DS=29905/SHA-256 verifies DNSKEY=29905/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`IRSNET.GOV. 14400 IN RRSIG ( DNSKEY 8 2 14400 20190426030225 20190419020225 29905 irsnet.gov. JColHXd2MxUMFUMHap69Ri1CTL8H5yVMGxE0lICd/sKINmPnSpV2PX9rP74QOjlyDY/YDEGLIZ4O ovWkQm990N6DOo5sAe37Mg9gusksxo4AT4kXwNUumdbNL9UUK5wccL6AzG4Q1chbW9yKGy4MdzZd antveds4n99EvNvGqmDryfLQM2QEDkjwoS5Dqsaq5V7B2xfqU8CSzpaLnbKnQdUUen63Tj4Qpk/Z kW4eSfqjhjgQuPBjFKylNP6rXa8KQmIwBxY9WRhRhvDCDQXwi6v8cHJJvoO9u9idD7JokI076OPz 6oLmpuHUAwbSmBUyAkJE29M+3k5NXFtCq0Pqlw== )`
	RRSIG=29905 and DNSKEY=29905/SEP verifies the DNSKEY RRset
	DNSKEY=43320 is now in the chain-of-trust
	DNSKEY=7356 is now in the chain-of-trust
	DNSKEY=57982/SEP is now in the chain-of-trust
	Query to ns3.irs.GOV for IRSNET.GOV/A
	Error querying ns3.irs.GOV/2610:30:2000:53:0:0:0:90 for IRSNET.GOV/A: 'IPv6 transport disabled'
	Received 793 bytes from 152.216.11.132
	;; Answer received from 152.216.11.132 (793 bytes) ;; HEADER SECTION ;; id = 61260 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) IRSNET.GOV. 900 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083373 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190420030415 20190413020415 7356 irsnet.gov. DO7NJV07GynRsMKCJwaVMcXLPrBGGtDzYQ/9BQjibBa0XF23DBvf6i/Bfv8rqtMaY2W+37EDYF2S zP98M3jAU1R7wUyKWDZ8cnVolI6a/TtKlJL3OQGWMLUyxDK3DIixYM3vNOfknLxBwvpNm+LkJlSt DLHpzYR2sk8fpVkO4D5jpQSPcllcdbr8TDE2amMz3S+9tH1OrllTonJ5vwi9bqxFj/jmg4VVM323 kqp5nxWD3h0Sw+v6Qm8DCVixfe46hjKujd2VoE6xNsLL0ftZDK9zvrxDymUk75UjtM5rmbCmqqzm pxK0dsRUctodoulv/0/K4TYAYw3V1VkLiXyUsg== ) dakpsnhg8j2q6nfi3o3oimskir8b9pbv.IRSNET.GOV. 900 IN NSEC3 ( 1 0 10 aabbccdd holcj128mi4pmkjsoum0uiii6s32mti6 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) dakpsnhg8j2q6nfi3o3oimskir8b9pbv.IRSNET.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20190420030415 20190413020415 7356 irsnet.gov. D5CU2ywGhWKxo2/mKIMXbD2vFA1bRM+W3xW7nNryG2fxZ11PySbuoWtD0LQgPvPxDSpnsIBX1a4E Uj3c5HMhV1m9ifBbGp6KLepsA33CFhqE5MNlqR/5d7l9yXOLT5yoDxIPiWmBFhxoB7a1LoW+/o86 ip6sj/m6hZmkKcAWGMOFVSQpbelARLaEZfpSmDTaBYT7g+JBXi0YqsMvBrqjAsm+k8I5KUW+2Vlf xfE948p3hcREwpjkKFz4fswp3xnyOEe9pQE1WdwrA3xjBOHVXNCt+rkZ4bEuwC9MlWdSd58xZKZF sIA5C1sBVsAXUPZ1NRi6rdYBsxzE19i/vYgdcQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	IRSNET.GOV is authoritative for IRSNET.GOV
	Found RRSIG signed by irsnet.gov zone
	Query to ns4.irs.GOV for IRSNET.GOV/SOA
	Error querying ns4.irs.GOV/2610:30:2000:53:0:0:0:91 for IRSNET.GOV/SOA: 'IPv6 transport disabled'
	Received 777 bytes from 152.216.11.133
	;; Answer received from 152.216.11.133 (777 bytes) ;; HEADER SECTION ;; id = 30779 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSNET.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083375 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190422031208 20190415021208 7356 irsnet.gov. Ru7zz49N/+rPoDgx/0ecCfRwgf3JUtK0qwZLpSOD5L33Y8ZyosQPfTYkag/sA0yTYf2wWw4nxEwY efUQLZLOQNrsk95DYUYOUx0xUneNJiy5QDCRpkBYNNtSv/FVX53dEa7ymKLJBjeTpibdkh/jnfVO Z3KyvUcfFvRC519OA13mFsXFfkmGMryR6L21GjTDTxmk2Jyg/CoOp3WxxY8v1diThb96nKBChxLZ u1SruIvcSP5yzm1y/pAxenwiLjPURLeGEuK5DEhqM9lQ3y7R5c6bHwPf7ZhPwQUO4/LjHcau2tPr IYgM70XNHHGBHKJeXhUYjljELTIxNeU/nFpr/g== ) ;; AUTHORITY SECTION (5 records) IRSNET.GOV. 14400 IN NS ns1.irs.GOV. IRSNET.GOV. 14400 IN NS ns2.irs.GOV. IRSNET.GOV. 14400 IN NS ns3.irs.GOV. IRSNET.GOV. 14400 IN NS ns4.irs.GOV. IRSNET.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190422031208 20190415021208 7356 irsnet.gov. PaALJe7DLCNuNh5tgiFcZB2d3e6JTvdKFlxf4tveb7YKj0Tv1gWLGkbygdorFjamicEjoPwuGU0u YjecjhgeUMlsu2qYecNC2s/VD+VRMFbtxaVc2wDz8k75RZeEYbYh+aAUTQxnW2zIgliyUF0wiTtC tg1/o+uRXEsa0kw2vb+QfQz0iWHc1HGPb8dIxOKAzRQDcqMMauOGSKH1db/fBW2u439ETI4+JcEs 25mzb3alUJlsVcdfXGmgXaU+j8uPFhvJqC9yQE5QMjz3nPtwuwtqMJzUbsFiKzsR39sVYdeHp1rS 4WbXkthlHKCO25hFtZRPXNHFgC0jN0CWjEZ+hw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	Query to ns3.irs.GOV for IRSNET.GOV/SOA
	Error querying ns3.irs.GOV/2610:30:2000:53:0:0:0:90 for IRSNET.GOV/SOA: 'IPv6 transport disabled'
	Received 777 bytes from 152.216.11.132
	;; Answer received from 152.216.11.132 (777 bytes) ;; HEADER SECTION ;; id = 54175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSNET.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083373 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190420030415 20190413020415 7356 irsnet.gov. DO7NJV07GynRsMKCJwaVMcXLPrBGGtDzYQ/9BQjibBa0XF23DBvf6i/Bfv8rqtMaY2W+37EDYF2S zP98M3jAU1R7wUyKWDZ8cnVolI6a/TtKlJL3OQGWMLUyxDK3DIixYM3vNOfknLxBwvpNm+LkJlSt DLHpzYR2sk8fpVkO4D5jpQSPcllcdbr8TDE2amMz3S+9tH1OrllTonJ5vwi9bqxFj/jmg4VVM323 kqp5nxWD3h0Sw+v6Qm8DCVixfe46hjKujd2VoE6xNsLL0ftZDK9zvrxDymUk75UjtM5rmbCmqqzm pxK0dsRUctodoulv/0/K4TYAYw3V1VkLiXyUsg== ) ;; AUTHORITY SECTION (5 records) IRSNET.GOV. 14400 IN NS ns1.irs.GOV. IRSNET.GOV. 14400 IN NS ns2.irs.GOV. IRSNET.GOV. 14400 IN NS ns3.irs.GOV. IRSNET.GOV. 14400 IN NS ns4.irs.GOV. IRSNET.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190420030415 20190413020415 7356 irsnet.gov. qajGuC2dwSDqIaDLwUVEAToqd+1jsHH+Al3hGvSh0h+16aZvoglr6/Y2v6U6d+RvxgHjBnK1JPU8 TzlbzyPB0cp+GD8iiq8cdHG42+bYkinImpMw7Z4O20W+ByO0ysVvEtscLZXTsVX68UShbK1oVe/o qlnPHnJjigIQT0+wMV4K3lrVCYW03sAOCA5+ezSQ3w++mTAAOJ9SeB/GcA0cAsfTaA8oRV6JV9tc io/AlkCPZFHL5UVcWCZ116RpDS/CFrbBwPnAtXwwQKsYndxWRJIAuUGrUAE5x81yyjePweoVB89I FtfyX3mQObcX9T1a+kIB4k1UtslgidsooZFMvA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns3.irs.GOV serial (2010083373) differs from ns4.irs.GOV serial (2010083375)
	Query to ns2.irs.GOV for IRSNET.GOV/SOA
	Error querying ns2.irs.GOV/2610:30:4000:53:0:0:0:91 for IRSNET.GOV/SOA: 'IPv6 transport disabled'
	Received 777 bytes from 152.216.7.165
	;; Answer received from 152.216.7.165 (777 bytes) ;; HEADER SECTION ;; id = 39370 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSNET.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083379 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190426030225 20190419020225 7356 irsnet.gov. 3DP6OxG57SPfOy7alv4Q+SG20Tc5Jjlr0rzMOlXf2O42TrrWDNzcHEkRg6idp3vR8K05I+MONPYh EeuCRhgeH7INZTUKQztwjyAHY/gGedWrqIuD2eSlt6xNsdMsoMzdHPtQ3LdyK6X83JZg2oCGVH7U IHxI5oRXQJiZUDV8rkK4jYy4/WOEv1KoVEcIGvtjry5kznFbFL7hpLQwxdxA+bq5fO4XDq8c5ukY U8QKGUag5OxWrbi50QdUQ9T6WosdY2aBUCirSyhZZzy8SDYJICwmZImt8xulIv7mbf1whOQrqTnX 1lxNiOZrM3olN7yB7iNtqgkXguN7B25qw2WyNQ== ) ;; AUTHORITY SECTION (5 records) IRSNET.GOV. 14400 IN NS ns1.irs.GOV. IRSNET.GOV. 14400 IN NS ns2.irs.GOV. IRSNET.GOV. 14400 IN NS ns3.irs.GOV. IRSNET.GOV. 14400 IN NS ns4.irs.GOV. IRSNET.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190426030225 20190419020225 7356 irsnet.gov. dRC9AO5stHvk9RwoHdc98zMFrJVpHWDrAwbjnxRnGthxL5sZL2Hr9A1QO1w9pN9l2j0YJA0alJrn CraVa0gGqGUs7AjRUXEHd6aG+RB9VPbcXmr4C2heTAxvGp/PvSaoh81b9Cvdj6RaKohQ6jTiiTqT 7eHpF6n0ZziRBqNagh2ZRjFHGbaPXp0AqN7twDwXDzq0uTG/gdFsU/89c2lTsZ1/HVdyHNY5BojM Yjn6uMjZqhQbyjCXHB/xD4mkBjBJpdml4n0b+kIvWiyjqkSZmX5FsEH98xd0uhejTrG99kAghgx2 StAk/7n0RcQQGSNOvh7tPfjlQaG8OsSQnXd4Jg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns2.irs.GOV serial (2010083379) differs from ns4.irs.GOV serial (2010083375)
	Query to ns1.irs.GOV for IRSNET.GOV/SOA
	Error querying ns1.irs.GOV/2610:30:4000:53:0:0:0:90 for IRSNET.GOV/SOA: 'IPv6 transport disabled'
	Received 777 bytes from 152.216.7.164
	;; Answer received from 152.216.7.164 (777 bytes) ;; HEADER SECTION ;; id = 2466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSNET.GOV. 14400 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083379 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190426030225 20190419020225 7356 irsnet.gov. 3DP6OxG57SPfOy7alv4Q+SG20Tc5Jjlr0rzMOlXf2O42TrrWDNzcHEkRg6idp3vR8K05I+MONPYh EeuCRhgeH7INZTUKQztwjyAHY/gGedWrqIuD2eSlt6xNsdMsoMzdHPtQ3LdyK6X83JZg2oCGVH7U IHxI5oRXQJiZUDV8rkK4jYy4/WOEv1KoVEcIGvtjry5kznFbFL7hpLQwxdxA+bq5fO4XDq8c5ukY U8QKGUag5OxWrbi50QdUQ9T6WosdY2aBUCirSyhZZzy8SDYJICwmZImt8xulIv7mbf1whOQrqTnX 1lxNiOZrM3olN7yB7iNtqgkXguN7B25qw2WyNQ== ) ;; AUTHORITY SECTION (5 records) IRSNET.GOV. 14400 IN NS ns1.irs.GOV. IRSNET.GOV. 14400 IN NS ns2.irs.GOV. IRSNET.GOV. 14400 IN NS ns3.irs.GOV. IRSNET.GOV. 14400 IN NS ns4.irs.GOV. IRSNET.GOV. 14400 IN RRSIG ( NS 8 2 14400 20190426030225 20190419020225 7356 irsnet.gov. dRC9AO5stHvk9RwoHdc98zMFrJVpHWDrAwbjnxRnGthxL5sZL2Hr9A1QO1w9pN9l2j0YJA0alJrn CraVa0gGqGUs7AjRUXEHd6aG+RB9VPbcXmr4C2heTAxvGp/PvSaoh81b9Cvdj6RaKohQ6jTiiTqT 7eHpF6n0ZziRBqNagh2ZRjFHGbaPXp0AqN7twDwXDzq0uTG/gdFsU/89c2lTsZ1/HVdyHNY5BojM Yjn6uMjZqhQbyjCXHB/xD4mkBjBJpdml4n0b+kIvWiyjqkSZmX5FsEH98xd0uhejTrG99kAghgx2 StAk/7n0RcQQGSNOvh7tPfjlQaG8OsSQnXd4Jg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns1.irs.GOV serial (2010083379) differs from ns4.irs.GOV serial (2010083375)
	Query to ns3.irs.GOV for IRSNET.GOV/A
	Received 793 bytes from 152.216.11.132
	;; Answer received from 152.216.11.132 (793 bytes) ;; HEADER SECTION ;; id = 46583 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSNET.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) IRSNET.GOV. 900 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083373 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 900 ;minimum ) IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190420030415 20190413020415 7356 irsnet.gov. DO7NJV07GynRsMKCJwaVMcXLPrBGGtDzYQ/9BQjibBa0XF23DBvf6i/Bfv8rqtMaY2W+37EDYF2S zP98M3jAU1R7wUyKWDZ8cnVolI6a/TtKlJL3OQGWMLUyxDK3DIixYM3vNOfknLxBwvpNm+LkJlSt DLHpzYR2sk8fpVkO4D5jpQSPcllcdbr8TDE2amMz3S+9tH1OrllTonJ5vwi9bqxFj/jmg4VVM323 kqp5nxWD3h0Sw+v6Qm8DCVixfe46hjKujd2VoE6xNsLL0ftZDK9zvrxDymUk75UjtM5rmbCmqqzm pxK0dsRUctodoulv/0/K4TYAYw3V1VkLiXyUsg== ) dakpsnhg8j2q6nfi3o3oimskir8b9pbv.IRSNET.GOV. 900 IN NSEC3 ( 1 0 10 aabbccdd holcj128mi4pmkjsoum0uiii6s32mti6 NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM ) dakpsnhg8j2q6nfi3o3oimskir8b9pbv.IRSNET.GOV. 900 IN RRSIG ( NSEC3 8 3 900 20190420030415 20190413020415 7356 irsnet.gov. D5CU2ywGhWKxo2/mKIMXbD2vFA1bRM+W3xW7nNryG2fxZ11PySbuoWtD0LQgPvPxDSpnsIBX1a4E Uj3c5HMhV1m9ifBbGp6KLepsA33CFhqE5MNlqR/5d7l9yXOLT5yoDxIPiWmBFhxoB7a1LoW+/o86 ip6sj/m6hZmkKcAWGMOFVSQpbelARLaEZfpSmDTaBYT7g+JBXi0YqsMvBrqjAsm+k8I5KUW+2Vlf xfE948p3hcREwpjkKFz4fswp3xnyOEe9pQE1WdwrA3xjBOHVXNCt+rkZ4bEuwC9MlWdSd58xZKZF sIA5C1sBVsAXUPZ1NRi6rdYBsxzE19i/vYgdcQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`IRSNET.GOV. 14400 IN RRSIG ( SOA 8 2 14400 20190420030415 20190413020415 7356 irsnet.gov. DO7NJV07GynRsMKCJwaVMcXLPrBGGtDzYQ/9BQjibBa0XF23DBvf6i/Bfv8rqtMaY2W+37EDYF2S zP98M3jAU1R7wUyKWDZ8cnVolI6a/TtKlJL3OQGWMLUyxDK3DIixYM3vNOfknLxBwvpNm+LkJlSt DLHpzYR2sk8fpVkO4D5jpQSPcllcdbr8TDE2amMz3S+9tH1OrllTonJ5vwi9bqxFj/jmg4VVM323 kqp5nxWD3h0Sw+v6Qm8DCVixfe46hjKujd2VoE6xNsLL0ftZDK9zvrxDymUk75UjtM5rmbCmqqzm pxK0dsRUctodoulv/0/K4TYAYw3V1VkLiXyUsg== )`
	RRSIG=7356 is expired
	None of the 1 RRSIG and 5 DNSKEY records validate the SOA RRset
	The SOA RRset was not signed by any keys in the chain-of-trust

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test IRSNET.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: