DNSSEC Analyzer - IRSSALES.GOV

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-24 10:48:08 UTC, NTP stratum 4

Analyzing DNSSEC problems for IRSSALES.GOV

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 48185 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to c.root-servers.net for IRSSALES.GOV/A
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for IRSSALES.GOV/A: 'IPv6 transport disabled'
	Received 670 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (670 bytes) ;; HEADER SECTION ;; id = 26686 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IRSSALES.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for GOV/DNSKEY
	Received 658 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (658 bytes) ;; HEADER SECTION ;; id = 6986 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOV. 172800 IN NS a.gov-servers.net. GOV. 172800 IN NS b.gov-servers.net. GOV. 172800 IN NS c.gov-servers.net. GOV. 172800 IN NS d.gov-servers.net. GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to j.root-servers.net for GOV/DS
	Received 403 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (403 bytes) ;; HEADER SECTION ;; id = 64766 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190507050000 20190424040000 25266 . P/lz8XVonAZDJE2RMLV6BaoZ+yTpN68Yiq7wRSDeWhu3zoahDUCcpqIgLX1iFGJe1ifOkPW4TqyS nLjBBO9+l/0U9JpnRqK+yIGRZC0J99mGL9cBEFnbcjA3wSHuceTTQJri1RXWPRJYGguNXHywLkvq OAP9yWyS48+kvNIHa0DOelZRtkHgy/WhAZRl92Vp61Ew0FgEiEitp9Z8PpsjpHOrQnW+PP/spzrC zdu5SdVZTfhZRBAMls3jNYdc1DAxTfLynFwx5qapAl4dQ4Mx1HO+499RmNILSkY666hsps55cc0f QXlcgUi6k2YPnps/j+UF1Nnz9qKJ8ofdjfTfmA== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to c.gov-servers.net for GOV/DNSKEY
	Error querying c.gov-servers.net/2620:74:28:0:0:0:2:30 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (743 bytes) ;; HEADER SECTION ;; id = 13010 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190502214731 20190417214231 7698 gov. GjRUnOLfnBAtIlt6hLcfcO1H6NuS90vNTDPZ+AQznOz3HueEqBORAmtN1Yr1z0Bnu7LHCEUVijJN SAfPRqPhwhnwBUWDHBahKuDspOKEJtNHzO5Wag4dk5n9szFVyIf6oWOPc5B0NLZc/9phCu4it24X FOynCwl+G5Fo1bFQaMfoh1CSDwZeq90LFwjLUOOKMMcwHdTVL7DIreDuGsqkFS4ZX5MoqztrUkmj TN9nF9soq7kSUiyPtbGy0c+FgMc8iEE5weI0bYXC2J8msnsFQijTQTPiwZGSIVZD5l74b2uK1SVq rHZULW5BRRnVaAGCEVLU8gTPZS0GRBNWNQcbWQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to a.gov-servers.net for IRSSALES.GOV/A
	Received 504 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (504 bytes) ;; HEADER SECTION ;; id = 56166 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IRSSALES.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) IRSSALES.GOV. 86400 IN NS ns1.irs.GOV. IRSSALES.GOV. 86400 IN NS ns3.irs.GOV. IRSSALES.GOV. 86400 IN NS ns4.irs.GOV. IRSSALES.GOV. 86400 IN NS ns2.irs.GOV. IRSSALES.GOV. 3600 IN DS ( 32366 8 2 2f5520423ae89d366a937976791d9d9e6a70c9c6bc4b43afe7e88b5ad414ffe2 ) IRSSALES.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. fQBflzCBSB/aXS4csvKrWEHVtqq5ofYyAl/klC/Bs8+DaVezU9uvUrmNG0YnW2ZS86kSjHrpLpDI sX8S0/WP02HR+ZjcaT1K520XGUWYTyQi72Y418IG5ut6xa/gKE0EAgnyly98QECnuSN8+exsoBpe 7ahywchJE5N59Mev2y0= ) ;; ADDITIONAL SECTION (9 records) ns1.irs.GOV. 86400 IN A 152.216.7.164 ns1.irs.GOV. 86400 IN AAAA 2610:30:4000:53::90 ns3.irs.GOV. 86400 IN A 152.216.11.132 ns3.irs.GOV. 86400 IN AAAA 2610:30:2000:53::90 ns4.irs.GOV. 86400 IN A 152.216.11.133 ns4.irs.GOV. 86400 IN AAAA 2610:30:2000:53::91 ns2.irs.GOV. 86400 IN A 152.216.7.165 ns2.irs.GOV. 86400 IN AAAA 2610:30:4000:53::91 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for IRSSALES.GOV/DNSKEY
	Error querying a.gov-servers.net/2001:500:4431:0:0:0:2:30 for IRSSALES.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 504 bytes from 69.36.157.30
	;; Answer received from 69.36.157.30 (504 bytes) ;; HEADER SECTION ;; id = 24558 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; IRSSALES.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) IRSSALES.GOV. 86400 IN NS ns1.irs.GOV. IRSSALES.GOV. 86400 IN NS ns3.irs.GOV. IRSSALES.GOV. 86400 IN NS ns4.irs.GOV. IRSSALES.GOV. 86400 IN NS ns2.irs.GOV. IRSSALES.GOV. 3600 IN DS ( 32366 8 2 2f5520423ae89d366a937976791d9d9e6a70c9c6bc4b43afe7e88b5ad414ffe2 ) IRSSALES.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. fQBflzCBSB/aXS4csvKrWEHVtqq5ofYyAl/klC/Bs8+DaVezU9uvUrmNG0YnW2ZS86kSjHrpLpDI sX8S0/WP02HR+ZjcaT1K520XGUWYTyQi72Y418IG5ut6xa/gKE0EAgnyly98QECnuSN8+exsoBpe 7ahywchJE5N59Mev2y0= ) ;; ADDITIONAL SECTION (9 records) ns1.irs.GOV. 86400 IN A 152.216.7.164 ns1.irs.GOV. 86400 IN AAAA 2610:30:4000:53::90 ns3.irs.GOV. 86400 IN A 152.216.11.132 ns3.irs.GOV. 86400 IN AAAA 2610:30:2000:53::90 ns4.irs.GOV. 86400 IN A 152.216.11.133 ns4.irs.GOV. 86400 IN AAAA 2610:30:2000:53::91 ns2.irs.GOV. 86400 IN A 152.216.7.165 ns2.irs.GOV. 86400 IN AAAA 2610:30:4000:53::91 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone IRSSALES.GOV

IRSSALES.GOV

	Checking DS between GOV and IRSSALES.GOV
	Query to d.gov-servers.net for IRSSALES.GOV/DS
	Error querying d.gov-servers.net/2620:74:29:0:0:0:2:30 for IRSSALES.GOV/DS: 'IPv6 transport disabled'
	Received 252 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (252 bytes) ;; HEADER SECTION ;; id = 64973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; IRSSALES.GOV. IN DS ;; ANSWER SECTION (2 records) IRSSALES.GOV. 3600 IN DS ( 32366 8 2 2f5520423ae89d366a937976791d9d9e6a70c9c6bc4b43afe7e88b5ad414ffe2 ) IRSSALES.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. fQBflzCBSB/aXS4csvKrWEHVtqq5ofYyAl/klC/Bs8+DaVezU9uvUrmNG0YnW2ZS86kSjHrpLpDI sX8S0/WP02HR+ZjcaT1K520XGUWYTyQi72Y418IG5ut6xa/gKE0EAgnyly98QECnuSN8+exsoBpe 7ahywchJE5N59Mev2y0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for IRSSALES.GOV in the GOV zone
	DS=32366/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`IRSSALES.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190501041007 20190424041007 43583 gov. fQBflzCBSB/aXS4csvKrWEHVtqq5ofYyAl/klC/Bs8+DaVezU9uvUrmNG0YnW2ZS86kSjHrpLpDI sX8S0/WP02HR+ZjcaT1K520XGUWYTyQi72Y418IG5ut6xa/gKE0EAgnyly98QECnuSN8+exsoBpe 7ahywchJE5N59Mev2y0= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=32366/SHA-256 is now in the chain-of-trust
	`IRSSALES.GOV. 3600 IN DS ( 32366 8 2 2f5520423ae89d366a937976791d9d9e6a70c9c6bc4b43afe7e88b5ad414ffe2 )`
	Query to ns2.irs.GOV for IRSSALES.GOV/DNSKEY
	Error querying ns2.irs.GOV/2610:30:4000:53:0:0:0:91 for IRSSALES.GOV/DNSKEY: 'IPv6 transport disabled'
	Received 1445 bytes from 152.216.7.165
	;; Answer received from 152.216.7.165 (1445 bytes) ;; HEADER SECTION ;; id = 36298 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSSALES.GOV. IN DNSKEY ;; ANSWER SECTION (5 records) IRSSALES.GOV. 3600 IN DNSKEY ( 256 3 8 AwEAAdr0RSKkp3fVOC7A1Fm5dB+vXLa9fi6YflQtxzfbWOMtBbQnb184VwxthXeqQW4m3FNStjJ9 14wfd4w0lg0zgDspEO6SxCzrA8iX+3URpa4jxOi+fKll8YKd8D9/D/gK0pAo4DHWoi0/RmQZ+ziv MZWg6b3BsYlsWBmgXPrA5tCtoq53WShpVD+4myUHsDPxPmLYtk6l7bq9YeVOru4NcxiqM+eVLime mqJuP7YwVR0oGiCur4QVrm+ttyGjb+TSnWdFQVAfK6+lPou1qn1u5aOdqT+eywmoWkCu3idKdQGh aKxC4ftCB8wwl1qe2eUpga5umaraSfZhG3eyDw/THtM= ) ; Key ID = 7443 IRSSALES.GOV. 3600 IN DNSKEY ( 256 3 8 AwEAAfEWU1yT274TpGHOYaT0J9JLBBqMsEpeJSu1gGVB1QOQkWRJvrQpK4q/WSj9EXdfeb2c4DZm d4JKIAuoSubMXrLVJr1EpUqWS5VpXnKoU/mn8XxRKVC+tUTxBjnR+mypr/Ctem1LIAvHvB+mYPPS rhTAS5AvCDLGGcjJ66znNLnpgCa0HI2WOAh0nyUgAHXmN2xCSY++DLgO08p/vGynwY5FAYKAPylv upi281/qwV2vMI8aEQ/pw8Sf8B7jy52zUlyDRi7Tp+7HQghgJX3X3FZJCmlGw6QpasqYL005Ugy0 xU9IRtxUkiFnWY3nxrjBhxxVuzabU58brYUNTKJkobE= ) ; Key ID = 47985 IRSSALES.GOV. 3600 IN DNSKEY ( 257 3 8 AwEAAZCAfIOamLP1h5YVCYQ+hc3yKZwErBeUDHEcPLdoVuWGTnR1kZr0rux8wqoRbezjnHVw90Q5 H4z2IP3m/w7bTPryhorUDgjhToVYyyO/ci095ZAoHfcn0lVuSzQFJFS228K7TdoRQ5QQt3FgEQ8S 5U+/Uh/OROyKpQtsUG0v5GVuejm7DgVJAy2Xd+au5zFnHDQ4/JoKR6poX0YyFZ2IP6WEPE3vVgCl 2yVq9D2mzXN8xvr49fnuf8iorUKcEeIx+Fncx9gGXyMoS4ilKKavTpVqQsaRXHfYYWYZRkfiRLqu wY5HcfXKOmbicOd3F/8ngvW11HKGTcTQ76GD4okNMFk= ) ; Key ID = 32366 IRSSALES.GOV. 3600 IN DNSKEY ( 257 3 8 AwEAAa8pTpvjof5O0bNIXMsz1lg+UuckQN4ZPgvgc3yquKeBrXi4YtavoVhr3hObMucgMZyazdNI xzuO479ad8lKo8QQS1W0IXsliloViXYgPV2Ekn8QssWNXQjuE7/7c0qMBlb0VjmM7dHVB6HWDBLK nScxLsNtvJ5u5ZDnWAt0LfL08DEPULUBdAeHOrLbSqSqDJoflUP7A74gFfK8rrNZYL3RCK6QVVGX OTy+Y4j/m9yc7yZimtRZsWDxWXUU8orhywwXEyOIP5Xn2mGcQAffreyzIphqDVhPbES0toMVBYSM dzQ3tDCrcgT2Qs1GEDFs7CBDcHceTblaHATsNl+COmU= ) ; Key ID = 11887 IRSSALES.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190501030726 20190424020726 32366 irssales.gov. TDvpLEM+KTWSpSwRRnGfOdWf719/wNuUVhhrYM2XyDJIsGfbu96eDuQHmPMtvLeU0/gZJ7RkdK9S z6xXZmJwIzxCUQsoTGU2nFsdmluzli5FkJ3emjmEnA3Q0i+LB5zfqT9U7qCEDKuChecYvHQNW8KN JiqENGleZGwyTSxAhBHpTk1VAS3d4Xw9X9XeNOUO8UCyyYWkSmBipBC5IruK1NzFqSCHwZE4Sqod Q57hwsFhBWeOhCwd8oALBUbppr+5C2dSJT8c0M8x7qNQdGD6JyfYK7d0QfEbUmUfSnoQ+w9juJbm eSUNBswRgDLVkkPn9vbu7GuEdL5ZbOUuPWnLcg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	Found 4 DNSKEY records for IRSSALES.GOV
	`IRSSALES.GOV. 3600 IN DNSKEY ( 256 3 8 AwEAAdr0RSKkp3fVOC7A1Fm5dB+vXLa9fi6YflQtxzfbWOMtBbQnb184VwxthXeqQW4m3FNStjJ9 14wfd4w0lg0zgDspEO6SxCzrA8iX+3URpa4jxOi+fKll8YKd8D9/D/gK0pAo4DHWoi0/RmQZ+ziv MZWg6b3BsYlsWBmgXPrA5tCtoq53WShpVD+4myUHsDPxPmLYtk6l7bq9YeVOru4NcxiqM+eVLime mqJuP7YwVR0oGiCur4QVrm+ttyGjb+TSnWdFQVAfK6+lPou1qn1u5aOdqT+eywmoWkCu3idKdQGh aKxC4ftCB8wwl1qe2eUpga5umaraSfZhG3eyDw/THtM= ) ; Key ID = 7443`
	`IRSSALES.GOV. 3600 IN DNSKEY ( 256 3 8 AwEAAfEWU1yT274TpGHOYaT0J9JLBBqMsEpeJSu1gGVB1QOQkWRJvrQpK4q/WSj9EXdfeb2c4DZm d4JKIAuoSubMXrLVJr1EpUqWS5VpXnKoU/mn8XxRKVC+tUTxBjnR+mypr/Ctem1LIAvHvB+mYPPS rhTAS5AvCDLGGcjJ66znNLnpgCa0HI2WOAh0nyUgAHXmN2xCSY++DLgO08p/vGynwY5FAYKAPylv upi281/qwV2vMI8aEQ/pw8Sf8B7jy52zUlyDRi7Tp+7HQghgJX3X3FZJCmlGw6QpasqYL005Ugy0 xU9IRtxUkiFnWY3nxrjBhxxVuzabU58brYUNTKJkobE= ) ; Key ID = 47985`
	`IRSSALES.GOV. 3600 IN DNSKEY ( 257 3 8 AwEAAZCAfIOamLP1h5YVCYQ+hc3yKZwErBeUDHEcPLdoVuWGTnR1kZr0rux8wqoRbezjnHVw90Q5 H4z2IP3m/w7bTPryhorUDgjhToVYyyO/ci095ZAoHfcn0lVuSzQFJFS228K7TdoRQ5QQt3FgEQ8S 5U+/Uh/OROyKpQtsUG0v5GVuejm7DgVJAy2Xd+au5zFnHDQ4/JoKR6poX0YyFZ2IP6WEPE3vVgCl 2yVq9D2mzXN8xvr49fnuf8iorUKcEeIx+Fncx9gGXyMoS4ilKKavTpVqQsaRXHfYYWYZRkfiRLqu wY5HcfXKOmbicOd3F/8ngvW11HKGTcTQ76GD4okNMFk= ) ; Key ID = 32366`
	`IRSSALES.GOV. 3600 IN DNSKEY ( 257 3 8 AwEAAa8pTpvjof5O0bNIXMsz1lg+UuckQN4ZPgvgc3yquKeBrXi4YtavoVhr3hObMucgMZyazdNI xzuO479ad8lKo8QQS1W0IXsliloViXYgPV2Ekn8QssWNXQjuE7/7c0qMBlb0VjmM7dHVB6HWDBLK nScxLsNtvJ5u5ZDnWAt0LfL08DEPULUBdAeHOrLbSqSqDJoflUP7A74gFfK8rrNZYL3RCK6QVVGX OTy+Y4j/m9yc7yZimtRZsWDxWXUU8orhywwXEyOIP5Xn2mGcQAffreyzIphqDVhPbES0toMVBYSM dzQ3tDCrcgT2Qs1GEDFs7CBDcHceTblaHATsNl+COmU= ) ; Key ID = 11887`
	DNSKEY=32366/SEP is now in the chain-of-trust
	DS=32366/SHA-256 verifies DNSKEY=32366/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`IRSSALES.GOV. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190501030726 20190424020726 32366 irssales.gov. TDvpLEM+KTWSpSwRRnGfOdWf719/wNuUVhhrYM2XyDJIsGfbu96eDuQHmPMtvLeU0/gZJ7RkdK9S z6xXZmJwIzxCUQsoTGU2nFsdmluzli5FkJ3emjmEnA3Q0i+LB5zfqT9U7qCEDKuChecYvHQNW8KN JiqENGleZGwyTSxAhBHpTk1VAS3d4Xw9X9XeNOUO8UCyyYWkSmBipBC5IruK1NzFqSCHwZE4Sqod Q57hwsFhBWeOhCwd8oALBUbppr+5C2dSJT8c0M8x7qNQdGD6JyfYK7d0QfEbUmUfSnoQ+w9juJbm eSUNBswRgDLVkkPn9vbu7GuEdL5ZbOUuPWnLcg== )`
	RRSIG=32366 and DNSKEY=32366/SEP verifies the DNSKEY RRset
	DNSKEY=7443 is now in the chain-of-trust
	DNSKEY=47985 is now in the chain-of-trust
	DNSKEY=11887/SEP is now in the chain-of-trust
	Query to ns3.irs.GOV for IRSSALES.GOV/A
	Received 749 bytes from 152.216.11.132
	;; Answer received from 152.216.11.132 (749 bytes) ;; HEADER SECTION ;; id = 46235 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSSALES.GOV. IN A ;; ANSWER SECTION (3 records) IRSSALES.GOV. 3600 IN A 152.216.7.111 IRSSALES.GOV. 3600 IN A 152.216.11.111 IRSSALES.GOV. 3600 IN RRSIG ( A 8 2 3600 20190420030415 20190413020415 47985 irssales.gov. L3xGIZJim8wSfTWIRhlSuvPzi7IWT5mtZazAf5/y1tw/5fma6l/tXPTuHHe76aNPHNVIkzxKaUPH 1cjxrWX5VUUGV4uyScLFuMjLPHu4Q486YWRVog2X7l382Osyay2aqUOPFyWdjKHJaeaq8R+KoYJu oUq2Jai5vJco0ADZl+CnTqBi4qEfAbrXNCyc2qe2BMZgV2WkqQn+WgATktoLEGb/sfaikh5aWVw9 aLR43ahMPueDgPG/xZfH1UCgbV2mXdczi4C6n0bWO82r6NrNT3ttB+rXF+MQ5dj5VKsvtCHMHLnX pGRM7rbE4RBIzKkzFqO5fs5BJE27n56UH1q0FQ== ) ;; AUTHORITY SECTION (5 records) IRSSALES.GOV. 3600 IN NS ns1.irs.GOV. IRSSALES.GOV. 3600 IN NS ns2.irs.GOV. IRSSALES.GOV. 3600 IN NS ns3.irs.GOV. IRSSALES.GOV. 3600 IN NS ns4.irs.GOV. IRSSALES.GOV. 3600 IN RRSIG ( NS 8 2 3600 20190420030415 20190413020415 47985 irssales.gov. l1BDm/SGGusgqNL2GN0wy3ARpiWjnrHBm/koZXIIUnE3FP8WYnAmz3rOYwCrnK+qCrynPHWg4ioq 4YV/wMQ6V2QxIDIlQqtdNUF6IFNlGLsA04QRli1O2H/RuMYAOFNDX7YoDNa8zGmjzvnUmU/rmOEM Y7b/ch1Y6CMUNdEagBXt1h8ppaCgPg9A8TGjRfNaz2+tbt6azC8kXjAUfkysJzUYC6w3aqxLdoed c+Fs83IkEHzg1qCvz9l+O27OT6onvIZ94YVNw1ONdMs+vK26x5ydY+YEnUy8Eb7jvWVQM/4HGi/O wog0Gfb+p7XnN6Mj0itGoJwuwUYnyUpA2sI1xw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	IRSSALES.GOV is authoritative for IRSSALES.GOV
	Found RRSIG signed by irssales.gov zone
	Query to ns4.irs.GOV for IRSSALES.GOV/SOA
	Error querying ns4.irs.GOV/2610:30:2000:53:0:0:0:91 for IRSSALES.GOV/SOA: 'IPv6 transport disabled'
	Received 783 bytes from 152.216.11.133
	;; Answer received from 152.216.11.133 (783 bytes) ;; HEADER SECTION ;; id = 30191 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSSALES.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSSALES.GOV. 3600 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083338 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) IRSSALES.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20190422031208 20190415021208 47985 irssales.gov. ti76EPl3Zmi3/dxU4Da+1lxe7HcFcNvMtdv8J25dd2FX3aYRj8DXIuDH30SDQoIxGLKeXkNM+4oZ 3vtmSpUFZ+LJJ11rV5MNcv2/J2/xjV28HFglq+vrLgFsntykaczNvCHhkif8fd5dG+/OU+a2zutx jqLgmIY3K3GXzv4BGImK3E00V8vnvkhBVaIsHjMVTKuzr39iYNsAlIAS4pb9j9elR+bq1Z+ev7PS suM9j/nWdWvjC7U+cFviw4MN7UZBC1xNj+ZUMVBN6GN9c64BBeR1mBEzXGBvxkgmgRM43u3ooYRh OPMMRcMsFT3uSCrohebzjnvcDD16w7B+MhI+ug== ) ;; AUTHORITY SECTION (5 records) IRSSALES.GOV. 3600 IN NS ns1.irs.GOV. IRSSALES.GOV. 3600 IN NS ns2.irs.GOV. IRSSALES.GOV. 3600 IN NS ns3.irs.GOV. IRSSALES.GOV. 3600 IN NS ns4.irs.GOV. IRSSALES.GOV. 3600 IN RRSIG ( NS 8 2 3600 20190422031208 20190415021208 47985 irssales.gov. BM9m1W0f99Cvl6o92bF0Lg3CgZoU5hTR4Jpvf/dqIktwRlkEEy2f+zM5z90B4eZpgnYagPs1ayC1 V59S7eBh4zHwdfI3eSsBroRlLCYK+PMZz1mkUNLxVjHA5TAGkYfR1XPe/txCFOs/Ky7bsE96Y3ed A+gEaZb4hEgVt475Ao+B2dr07r+4o0BdRUsYKiPZVCYgvykrVcqw/zIix3ifi7J+coQvDlwh3wPD DjPVdb+hG9EFzw08aJ9z1j5LSS8QLfBYX9DpHKgTYxJekio/uU08+HQ3QqgPjHZMTAPD5a+3wSmh kbULGqq77BMvlmiWDN7razIOodH1T8uDujRy6w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	Query to ns3.irs.GOV for IRSSALES.GOV/SOA
	Error querying ns3.irs.GOV/2610:30:2000:53:0:0:0:90 for IRSSALES.GOV/SOA: 'IPv6 transport disabled'
	Received 783 bytes from 152.216.11.132
	;; Answer received from 152.216.11.132 (783 bytes) ;; HEADER SECTION ;; id = 10426 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSSALES.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSSALES.GOV. 3600 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083336 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) IRSSALES.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20190420030415 20190413020415 47985 irssales.gov. 6QXqYmEqIzbeoFC2D21nibSFOXKxveX4cEAzfonJIxB2HHfTw7JLgxql2wmlgFFvj78sDeh64nf/ gfXgH6wb0XQdbo/2hw5yvkpcrJlC0Yi2+HAhlep5q0pDZQ3M5BbFl7MWgZjYyZkAdYv+ageI0IUS KZW8U7m3UeAex0f1k5Y/yEW/7gqfkRTRu5m/s0eft351YHYQT2pyNvf+dXHN2E+YoJ8qY972N8BV Fab3/jNemuA3wWX+NF9wFKicDMg5WT30+LFm+ZOEOIdj7+XSZwOe3rso/BKh/sE3aVWzIDYPRWmY ApU017C5bzv/8YpDJCrUdWR2cTDZcG7OCWmuwQ== ) ;; AUTHORITY SECTION (5 records) IRSSALES.GOV. 3600 IN NS ns1.irs.GOV. IRSSALES.GOV. 3600 IN NS ns2.irs.GOV. IRSSALES.GOV. 3600 IN NS ns3.irs.GOV. IRSSALES.GOV. 3600 IN NS ns4.irs.GOV. IRSSALES.GOV. 3600 IN RRSIG ( NS 8 2 3600 20190420030415 20190413020415 47985 irssales.gov. l1BDm/SGGusgqNL2GN0wy3ARpiWjnrHBm/koZXIIUnE3FP8WYnAmz3rOYwCrnK+qCrynPHWg4ioq 4YV/wMQ6V2QxIDIlQqtdNUF6IFNlGLsA04QRli1O2H/RuMYAOFNDX7YoDNa8zGmjzvnUmU/rmOEM Y7b/ch1Y6CMUNdEagBXt1h8ppaCgPg9A8TGjRfNaz2+tbt6azC8kXjAUfkysJzUYC6w3aqxLdoed c+Fs83IkEHzg1qCvz9l+O27OT6onvIZ94YVNw1ONdMs+vK26x5ydY+YEnUy8Eb7jvWVQM/4HGi/O wog0Gfb+p7XnN6Mj0itGoJwuwUYnyUpA2sI1xw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns3.irs.GOV serial (2010083336) differs from ns4.irs.GOV serial (2010083338)
	Query to ns2.irs.GOV for IRSSALES.GOV/SOA
	Error querying ns2.irs.GOV/2610:30:4000:53:0:0:0:91 for IRSSALES.GOV/SOA: 'IPv6 transport disabled'
	Received 783 bytes from 152.216.7.165
	;; Answer received from 152.216.7.165 (783 bytes) ;; HEADER SECTION ;; id = 49411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSSALES.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSSALES.GOV. 3600 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083347 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) IRSSALES.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20190501030726 20190424020726 47985 irssales.gov. rpJu5JlSgdJTvm3DfPfiUrPmKAcNFeWkeNHeFHEXazGv0YAEZCnwyLUYS46jIo26xWrgdIu+uRX3 kZgCk81fsQUpYpPCU0bZdYlvapkhOTt3V3Ij5x9w/qwcOqjhICThygFtNO/RVUAz4360kYy3WI2y F/Suj2Ktl1sLfMJTg0Fmc4+VKZVY6RXjFg0kKLmkeAMpXyeKiodVEurmNr8Nd3aM12RyVrEOjJlI 5gAZrBl2gCuN+SaTRY8jeVF4dB/ji1C+PQY1kWqtjStC/GE54qavVDYky/zNbS36+m0ABNhUw2GL r6QWarZgsRFZ1JmsVYrvkmp17WfeBKlTcC6TZA== ) ;; AUTHORITY SECTION (5 records) IRSSALES.GOV. 3600 IN NS ns1.irs.GOV. IRSSALES.GOV. 3600 IN NS ns2.irs.GOV. IRSSALES.GOV. 3600 IN NS ns3.irs.GOV. IRSSALES.GOV. 3600 IN NS ns4.irs.GOV. IRSSALES.GOV. 3600 IN RRSIG ( NS 8 2 3600 20190501030726 20190424020726 47985 irssales.gov. d3QEMtFei7R8+JhZsUvE7n9lFmxv7/O8CfGH648AXYgtPR41vYsmbTWrpbFNzD4agWCe7VI00WwZ 8YWiPbciP9pVbYby77HAQ+XayPr4ycFPRUqzxW5+Y1BzvhsuQSIWj2/bY2Zh/upmBxaLJLzQEIuH C0q8YLwsHWoeNydKwQeepUWg6SlbR9/YOaMhuzpl3wJW+TRGkWRuITSchDHnIzPZ7o+LP4qEROYM KXX5NZ5y2jIWBUdWqODXYYns3EZkHuiUpHhp0jSkPzY3BV2pBmIRqVMp8agIYhoArQDreWfx8xOY LgxzcPyoMPScGAP2EmBD3k8n/Q5OpYFDv7SqHA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns2.irs.GOV serial (2010083347) differs from ns4.irs.GOV serial (2010083338)
	Query to ns1.irs.GOV for IRSSALES.GOV/SOA
	Received 783 bytes from 152.216.7.164
	;; Answer received from 152.216.7.164 (783 bytes) ;; HEADER SECTION ;; id = 48898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSSALES.GOV. IN SOA ;; ANSWER SECTION (2 records) IRSSALES.GOV. 3600 IN SOA ( ns1.irs.GOV. it\.aciouns\.external\.dns\.admin.irs.GOV. 2010083347 ;serial 10800 ;refresh 3600 ;retry 2419200 ;expire 900 ;minimum ) IRSSALES.GOV. 3600 IN RRSIG ( SOA 8 2 3600 20190501030726 20190424020726 47985 irssales.gov. rpJu5JlSgdJTvm3DfPfiUrPmKAcNFeWkeNHeFHEXazGv0YAEZCnwyLUYS46jIo26xWrgdIu+uRX3 kZgCk81fsQUpYpPCU0bZdYlvapkhOTt3V3Ij5x9w/qwcOqjhICThygFtNO/RVUAz4360kYy3WI2y F/Suj2Ktl1sLfMJTg0Fmc4+VKZVY6RXjFg0kKLmkeAMpXyeKiodVEurmNr8Nd3aM12RyVrEOjJlI 5gAZrBl2gCuN+SaTRY8jeVF4dB/ji1C+PQY1kWqtjStC/GE54qavVDYky/zNbS36+m0ABNhUw2GL r6QWarZgsRFZ1JmsVYrvkmp17WfeBKlTcC6TZA== ) ;; AUTHORITY SECTION (5 records) IRSSALES.GOV. 3600 IN NS ns1.irs.GOV. IRSSALES.GOV. 3600 IN NS ns2.irs.GOV. IRSSALES.GOV. 3600 IN NS ns3.irs.GOV. IRSSALES.GOV. 3600 IN NS ns4.irs.GOV. IRSSALES.GOV. 3600 IN RRSIG ( NS 8 2 3600 20190501030726 20190424020726 47985 irssales.gov. d3QEMtFei7R8+JhZsUvE7n9lFmxv7/O8CfGH648AXYgtPR41vYsmbTWrpbFNzD4agWCe7VI00WwZ 8YWiPbciP9pVbYby77HAQ+XayPr4ycFPRUqzxW5+Y1BzvhsuQSIWj2/bY2Zh/upmBxaLJLzQEIuH C0q8YLwsHWoeNydKwQeepUWg6SlbR9/YOaMhuzpl3wJW+TRGkWRuITSchDHnIzPZ7o+LP4qEROYM KXX5NZ5y2jIWBUdWqODXYYns3EZkHuiUpHhp0jSkPzY3BV2pBmIRqVMp8agIYhoArQDreWfx8xOY LgxzcPyoMPScGAP2EmBD3k8n/Q5OpYFDv7SqHA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	ns1.irs.GOV serial (2010083347) differs from ns4.irs.GOV serial (2010083338)
	Query to ns3.irs.GOV for IRSSALES.GOV/A
	Received 749 bytes from 152.216.11.132
	;; Answer received from 152.216.11.132 (749 bytes) ;; HEADER SECTION ;; id = 1394 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option: ;; QUESTION SECTION (1 record) ;; IRSSALES.GOV. IN A ;; ANSWER SECTION (3 records) IRSSALES.GOV. 3600 IN A 152.216.7.111 IRSSALES.GOV. 3600 IN A 152.216.11.111 IRSSALES.GOV. 3600 IN RRSIG ( A 8 2 3600 20190420030415 20190413020415 47985 irssales.gov. L3xGIZJim8wSfTWIRhlSuvPzi7IWT5mtZazAf5/y1tw/5fma6l/tXPTuHHe76aNPHNVIkzxKaUPH 1cjxrWX5VUUGV4uyScLFuMjLPHu4Q486YWRVog2X7l382Osyay2aqUOPFyWdjKHJaeaq8R+KoYJu oUq2Jai5vJco0ADZl+CnTqBi4qEfAbrXNCyc2qe2BMZgV2WkqQn+WgATktoLEGb/sfaikh5aWVw9 aLR43ahMPueDgPG/xZfH1UCgbV2mXdczi4C6n0bWO82r6NrNT3ttB+rXF+MQ5dj5VKsvtCHMHLnX pGRM7rbE4RBIzKkzFqO5fs5BJE27n56UH1q0FQ== ) ;; AUTHORITY SECTION (5 records) IRSSALES.GOV. 3600 IN NS ns1.irs.GOV. IRSSALES.GOV. 3600 IN NS ns2.irs.GOV. IRSSALES.GOV. 3600 IN NS ns3.irs.GOV. IRSSALES.GOV. 3600 IN NS ns4.irs.GOV. IRSSALES.GOV. 3600 IN RRSIG ( NS 8 2 3600 20190420030415 20190413020415 47985 irssales.gov. l1BDm/SGGusgqNL2GN0wy3ARpiWjnrHBm/koZXIIUnE3FP8WYnAmz3rOYwCrnK+qCrynPHWg4ioq 4YV/wMQ6V2QxIDIlQqtdNUF6IFNlGLsA04QRli1O2H/RuMYAOFNDX7YoDNa8zGmjzvnUmU/rmOEM Y7b/ch1Y6CMUNdEagBXt1h8ppaCgPg9A8TGjRfNaz2+tbt6azC8kXjAUfkysJzUYC6w3aqxLdoed c+Fs83IkEHzg1qCvz9l+O27OT6onvIZ94YVNw1ONdMs+vK26x5ydY+YEnUy8Eb7jvWVQM/4HGi/O wog0Gfb+p7XnN6Mj0itGoJwuwUYnyUpA2sI1xw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 3072 ;; option:
	IRSSALES.GOV A RR has value 152.216.7.111
	IRSSALES.GOV A RR has value 152.216.11.111
	Found 1 RRSIGs over A RRset
	`IRSSALES.GOV. 3600 IN RRSIG ( A 8 2 3600 20190420030415 20190413020415 47985 irssales.gov. L3xGIZJim8wSfTWIRhlSuvPzi7IWT5mtZazAf5/y1tw/5fma6l/tXPTuHHe76aNPHNVIkzxKaUPH 1cjxrWX5VUUGV4uyScLFuMjLPHu4Q486YWRVog2X7l382Osyay2aqUOPFyWdjKHJaeaq8R+KoYJu oUq2Jai5vJco0ADZl+CnTqBi4qEfAbrXNCyc2qe2BMZgV2WkqQn+WgATktoLEGb/sfaikh5aWVw9 aLR43ahMPueDgPG/xZfH1UCgbV2mXdczi4C6n0bWO82r6NrNT3ttB+rXF+MQ5dj5VKsvtCHMHLnX pGRM7rbE4RBIzKkzFqO5fs5BJE27n56UH1q0FQ== )`
	RRSIG=47985 is expired
	None of the 1 RRSIG and 4 DNSKEY records validate the A RRset
	The A RRset was not signed by any keys in the chain-of-trust

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test IRSSALES.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: