DNSSEC Analyzer - bankcustomer.gov

Domain Name:

Time: 2022-11-28 17:58:50 UTC, NTP stratum 16

Analyzing DNSSEC problems for bankcustomer.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (864 octets) ;; HEADER SECTION ;; id = 30084 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to l.root-servers.net for bankcustomer.gov/A
	Received 635 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (635 octets) ;; HEADER SECTION ;; id = 42619 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bankcustomer.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . mqnKA1ZEUeFKl2aS5eWgk9WXLhjg7TyKaWWDHFB3ZfYrj30JFPGdG2svfm5sbkFbmlVen2KYIrBv IBKPIXQetl9s4Id/RpTt8i1DOfjBS8GOf7qpTIIcqohZCLWN9X07jCoD5xpaJMqWFJVIx2Cn9cIV e2QoCN1e9XpH8UWEFEg7eTXtfvZPJNMc9/c4C3T2uTvLfcgrgviVkO+Uz8ojikQx/f4vhJaciGyp 2GXFKOc154tHm8UyL1Gs5N5viympAiPFJxfwOXCphT7ZCmbQisUbEbKeLUVuT7Pk22hLAL0nw/xe 0b7yq/K7ZVMcyzuwXFQfPnRPIqcF+EMHXwSOlg== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for gov/DNSKEY
	Received 622 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (622 octets) ;; HEADER SECTION ;; id = 13480 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . mqnKA1ZEUeFKl2aS5eWgk9WXLhjg7TyKaWWDHFB3ZfYrj30JFPGdG2svfm5sbkFbmlVen2KYIrBv IBKPIXQetl9s4Id/RpTt8i1DOfjBS8GOf7qpTIIcqohZCLWN9X07jCoD5xpaJMqWFJVIx2Cn9cIV e2QoCN1e9XpH8UWEFEg7eTXtfvZPJNMc9/c4C3T2uTvLfcgrgviVkO+Uz8ojikQx/f4vhJaciGyp 2GXFKOc154tHm8UyL1Gs5N5viympAiPFJxfwOXCphT7ZCmbQisUbEbKeLUVuT7Pk22hLAL0nw/xe 0b7yq/K7ZVMcyzuwXFQfPnRPIqcF+EMHXwSOlg== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to a.root-servers.net for gov/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (367 octets) ;; HEADER SECTION ;; id = 1794 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . mqnKA1ZEUeFKl2aS5eWgk9WXLhjg7TyKaWWDHFB3ZfYrj30JFPGdG2svfm5sbkFbmlVen2KYIrBv IBKPIXQetl9s4Id/RpTt8i1DOfjBS8GOf7qpTIIcqohZCLWN9X07jCoD5xpaJMqWFJVIx2Cn9cIV e2QoCN1e9XpH8UWEFEg7eTXtfvZPJNMc9/c4C3T2uTvLfcgrgviVkO+Uz8ojikQx/f4vhJaciGyp 2GXFKOc154tHm8UyL1Gs5N5viympAiPFJxfwOXCphT7ZCmbQisUbEbKeLUVuT7Pk22hLAL0nw/xe 0b7yq/K7ZVMcyzuwXFQfPnRPIqcF+EMHXwSOlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . mqnKA1ZEUeFKl2aS5eWgk9WXLhjg7TyKaWWDHFB3ZfYrj30JFPGdG2svfm5sbkFbmlVen2KYIrBv IBKPIXQetl9s4Id/RpTt8i1DOfjBS8GOf7qpTIIcqohZCLWN9X07jCoD5xpaJMqWFJVIx2Cn9cIV e2QoCN1e9XpH8UWEFEg7eTXtfvZPJNMc9/c4C3T2uTvLfcgrgviVkO+Uz8ojikQx/f4vhJaciGyp 2GXFKOc154tHm8UyL1Gs5N5viympAiPFJxfwOXCphT7ZCmbQisUbEbKeLUVuT7Pk22hLAL0nw/xe 0b7yq/K7ZVMcyzuwXFQfPnRPIqcF+EMHXwSOlg== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for gov/DNSKEY
	Received 777 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (777 octets) ;; HEADER SECTION ;; id = 40037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdTUAXnPaU/j+tBXBKqj7wf6CTR5erm5HMRumZ8tyIXi4rmbOdvpGcGLEu3YjqwkGoht1S4B a555IpEt+oUsjN57HbQ6eAMxBCX50EC1ipBmnnznhgoflu+DE+4No9wXHHh9pa6Vn8N7QiG1zZ4e kc9rS0to56mkLfNzJ+gjzH3tOfB9W5qnEqkqRuqXHnXxQQLBQ1I6vh1VZ5uQKYIe2H0= ) ; Key ID = 56278 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205200254 20221120195754 7698 gov. FZUGnVFsKhKrSxuAbI6JdAQxCbzoP6JvsFLwKXwCMHIoBB2la/7+jwQ3DWB1LuJVqt/6SlSzTZbz mcq4Irnwjmwg+EQECsqhA7KIybCpPSiq/XsXPxvHrXes7+sVKa0UJ2wNq3yiKKzkAAlBOJfkEu5o 6jVpHpQ1NQG28rY1X4Ati7PE6ny3m3LkkrYEflE2YfXXOge+bCFjUBCBCX3YFTkJvrBuWUdfdyan 0FuN+tjFDUOzwz0t3RsiYrSfy8/Ozv8lzSI1Mip6f271uHgjpi51in8shWZibER4MxShpHa0zEQo kMiGRx3cxnAble1onSgEDfnovYe7Z7hm3ReLUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdTUAXnPaU/j+tBXBKqj7wf6CTR5erm5HMRumZ8tyIXi4rmbOdvpGcGLEu3YjqwkGoht1S4B a555IpEt+oUsjN57HbQ6eAMxBCX50EC1ipBmnnznhgoflu+DE+4No9wXHHh9pa6Vn8N7QiG1zZ4e kc9rS0to56mkLfNzJ+gjzH3tOfB9W5qnEqkqRuqXHnXxQQLBQ1I6vh1VZ5uQKYIe2H0= ) ; Key ID = 56278`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205200254 20221120195754 7698 gov. FZUGnVFsKhKrSxuAbI6JdAQxCbzoP6JvsFLwKXwCMHIoBB2la/7+jwQ3DWB1LuJVqt/6SlSzTZbz mcq4Irnwjmwg+EQECsqhA7KIybCpPSiq/XsXPxvHrXes7+sVKa0UJ2wNq3yiKKzkAAlBOJfkEu5o 6jVpHpQ1NQG28rY1X4Ati7PE6ny3m3LkkrYEflE2YfXXOge+bCFjUBCBCX3YFTkJvrBuWUdfdyan 0FuN+tjFDUOzwz0t3RsiYrSfy8/Ozv8lzSI1Mip6f271uHgjpi51in8shWZibER4MxShpHa0zEQo kMiGRx3cxnAble1onSgEDfnovYe7Z7hm3ReLUQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=56278 is now in the chain-of-trust
	Query to a.gov-servers.net for bankcustomer.gov/A
	Received 464 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (464 octets) ;; HEADER SECTION ;; id = 64487 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bankcustomer.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bankcustomer.gov. 86400 IN NS ceextauth1.treasury.gov. bankcustomer.gov. 86400 IN NS ns1.treasury.gov. bankcustomer.gov. 3600 IN DS ( 2470 8 1 046aaefc34fc9dc8aff512a4cda4a0cb9097f7a8 ) bankcustomer.gov. 3600 IN DS ( 2470 8 2 05bf63c661e01f2931f3680701ad0d8f018a353ad91e0aa0e5cad82133d60199 ) bankcustomer.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202194248 20221125194248 56278 gov. cAi5sI7KZIWYW4BMy2l15IpWsaYG9rMMkBrzrZ2AsfjG9o+f9cz9Qdkjrqh9TFhoVg8r0C9/ugej oq9xJknLT4ekS4uLtalIZBAcP49UHvFUyxmcfXDbmiiY16wwFjMwJ05QyNToF3ctPbG8xBLt90Oi v+ZnVE14FCO19cU0B7oMQxmMHeWcFku+ETV1q+nb3F/wkwhx0a+zkkZXv2mHMQ== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.gov. 86400 IN A 166.123.208.249 ceextauth1.treasury.gov. 86400 IN A 164.95.20.53 ns1.treasury.gov. 86400 IN AAAA 2610:108:4000:100a::249 ceextauth1.treasury.gov. 86400 IN AAAA 2610:108:3100:100a::20:53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.gov-servers.net for bankcustomer.gov/DNSKEY
	Received 464 bytes from 69.36.157.30
	;; Response received from 69.36.157.30 (464 octets) ;; HEADER SECTION ;; id = 29839 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bankcustomer.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) bankcustomer.gov. 86400 IN NS ceextauth1.treasury.gov. bankcustomer.gov. 86400 IN NS ns1.treasury.gov. bankcustomer.gov. 3600 IN DS ( 2470 8 1 046aaefc34fc9dc8aff512a4cda4a0cb9097f7a8 ) bankcustomer.gov. 3600 IN DS ( 2470 8 2 05bf63c661e01f2931f3680701ad0d8f018a353ad91e0aa0e5cad82133d60199 ) bankcustomer.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202194248 20221125194248 56278 gov. cAi5sI7KZIWYW4BMy2l15IpWsaYG9rMMkBrzrZ2AsfjG9o+f9cz9Qdkjrqh9TFhoVg8r0C9/ugej oq9xJknLT4ekS4uLtalIZBAcP49UHvFUyxmcfXDbmiiY16wwFjMwJ05QyNToF3ctPbG8xBLt90Oi v+ZnVE14FCO19cU0B7oMQxmMHeWcFku+ETV1q+nb3F/wkwhx0a+zkkZXv2mHMQ== ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.gov. 86400 IN A 166.123.208.249 ceextauth1.treasury.gov. 86400 IN A 164.95.20.53 ns1.treasury.gov. 86400 IN AAAA 2610:108:4000:100a::249 ceextauth1.treasury.gov. 86400 IN AAAA 2610:108:3100:100a::20:53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone bankcustomer.gov

bankcustomer.gov

	Checking DS between gov and bankcustomer.gov
	Query to d.gov-servers.net for bankcustomer.gov/DS
	Received 324 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (324 octets) ;; HEADER SECTION ;; id = 57976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bankcustomer.gov. IN DS ;; ANSWER SECTION (3 records) bankcustomer.gov. 3600 IN DS ( 2470 8 1 046aaefc34fc9dc8aff512a4cda4a0cb9097f7a8 ) bankcustomer.gov. 3600 IN DS ( 2470 8 2 05bf63c661e01f2931f3680701ad0d8f018a353ad91e0aa0e5cad82133d60199 ) bankcustomer.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202194248 20221125194248 56278 gov. cAi5sI7KZIWYW4BMy2l15IpWsaYG9rMMkBrzrZ2AsfjG9o+f9cz9Qdkjrqh9TFhoVg8r0C9/ugej oq9xJknLT4ekS4uLtalIZBAcP49UHvFUyxmcfXDbmiiY16wwFjMwJ05QyNToF3ctPbG8xBLt90Oi v+ZnVE14FCO19cU0B7oMQxmMHeWcFku+ETV1q+nb3F/wkwhx0a+zkkZXv2mHMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for bankcustomer.gov in the gov zone
	DS=2470/SHA-1 has algorithm RSASHA256
	DS=2470/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bankcustomer.gov. 3600 IN RRSIG ( DS 8 2 3600 20221202194248 20221125194248 56278 gov. cAi5sI7KZIWYW4BMy2l15IpWsaYG9rMMkBrzrZ2AsfjG9o+f9cz9Qdkjrqh9TFhoVg8r0C9/ugej oq9xJknLT4ekS4uLtalIZBAcP49UHvFUyxmcfXDbmiiY16wwFjMwJ05QyNToF3ctPbG8xBLt90Oi v+ZnVE14FCO19cU0B7oMQxmMHeWcFku+ETV1q+nb3F/wkwhx0a+zkkZXv2mHMQ== )`
	RRSIG=56278 and DNSKEY=56278 verifies the DS RRset
	DS=2470/SHA-1 is now in the chain-of-trust
	`bankcustomer.gov. 3600 IN DS ( 2470 8 1 046aaefc34fc9dc8aff512a4cda4a0cb9097f7a8 )`
	`bankcustomer.gov. 3600 IN DS ( 2470 8 2 05bf63c661e01f2931f3680701ad0d8f018a353ad91e0aa0e5cad82133d60199 )`
	Query to ceextauth1.treasury.gov for bankcustomer.gov/DNSKEY
	Received 1017 bytes from 164.95.20.53
	;; Response received from 164.95.20.53 (1017 octets) ;; HEADER SECTION ;; id = 12341 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bankcustomer.gov. IN DNSKEY ;; ANSWER SECTION (6 records) bankcustomer.gov. 300 IN DNSKEY ( 257 3 8 AwEAAamMalCqnrXDX2Ix/ek2pRHowdzUxMooN1Jqba7XQNNFvFW6F/kO6wYMo4t/QVZkuiMW9Gkf 7gAX0xhuU8iZr/XqIDScmwQrSAxYfIL6Qnv8SVZmKrBT/I4ei0CdZPmhCepUzyLGhDCFr9CP3G7L n6BhYKXZUw/59VX5bV8TOPgl ) ; Key ID = 2470 bankcustomer.gov. 300 IN DNSKEY ( 256 3 8 AwEAAZZ5yCryEtc3qIrPbabV2/qxJkrJPIvCviRrXFO80pjWtv8nI5cUKg5C1lBWEwHe1zSTWHab jCiBbGxIpOiRluZvAZCM8csmktR35WsUh/5owDDwvhfPEeOty7wCWqhKwo+6QZd+dlZ3r3iD1Kck s5b/C7CWleSTl6AemqUeMdxB ) ; Key ID = 46728 bankcustomer.gov. 300 IN DNSKEY ( 256 3 8 AwEAAbaf61hMDlBXg1t0vAPLzldMNL5YZLQfBYYogvViIReeSXMABJOyny4cJxRd2n6bk33f0tbK Ifut2wJxqGdkYcXr+irnPt2G/r0vHx28QnZtUusjn/y2F4CFeJ1DOXK9ZLyk2EUaYvPYlWa4GccV yKcbAEiRrfE7xsPCd2knHkTH ) ; Key ID = 29919 bankcustomer.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20221204032431 20221127022431 2470 bankcustomer.gov. JYIMIdALdBQbW/PiPIiHPBvowIFz1o4HNm4tI+g5bqn4rsn7iTeOql9i5gR3P9bTWOfhZBp1RcGO dJaAzEL9GbriM4O+8MoW5nZY4kDgiW/EW+p+C31uYIkKmWHHxy7NaWT9lESG0wZR9aIpSwsPrS6H E6sLIXPsyIO/idrBfnQ= ) bankcustomer.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20221204032431 20221127022431 46728 bankcustomer.gov. GJvVFU1+5m1U2kne9ZQp6oCgAOwBEOtzUuFFDS2grbdhYZ6G5bUDQnRxCHYFkuuN1rlioTlNFTFU EU7Bg0GsApdGgQ+BTtgJny8LbG66lzTvQyJX7V0zBgNvCYIqC/9B7zEZhb+G6rQPv6Kxg5Bt7v4s DThR6VvHshR6qGjYkEo= ) bankcustomer.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20221204032431 20221127022431 29919 bankcustomer.gov. sqld4RrDn9hZf/yppCcJa2SDqYn3Nfc1AOg+kygtG1aKpX0Qg3UiTpfQulvoRKo+XD0MunHQ7i5e rFvrE21SpgFGdoR6l1rwdfLCFaFMSR7/nSTgfib66g0Rb0Hr8Wzi2LEd93VUQWnG/tfeIIgD1twq cLg2ROeh34G9DzhtpA0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for bankcustomer.gov
	`bankcustomer.gov. 300 IN DNSKEY ( 257 3 8 AwEAAamMalCqnrXDX2Ix/ek2pRHowdzUxMooN1Jqba7XQNNFvFW6F/kO6wYMo4t/QVZkuiMW9Gkf 7gAX0xhuU8iZr/XqIDScmwQrSAxYfIL6Qnv8SVZmKrBT/I4ei0CdZPmhCepUzyLGhDCFr9CP3G7L n6BhYKXZUw/59VX5bV8TOPgl ) ; Key ID = 2470`
	`bankcustomer.gov. 300 IN DNSKEY ( 256 3 8 AwEAAZZ5yCryEtc3qIrPbabV2/qxJkrJPIvCviRrXFO80pjWtv8nI5cUKg5C1lBWEwHe1zSTWHab jCiBbGxIpOiRluZvAZCM8csmktR35WsUh/5owDDwvhfPEeOty7wCWqhKwo+6QZd+dlZ3r3iD1Kck s5b/C7CWleSTl6AemqUeMdxB ) ; Key ID = 46728`
	`bankcustomer.gov. 300 IN DNSKEY ( 256 3 8 AwEAAbaf61hMDlBXg1t0vAPLzldMNL5YZLQfBYYogvViIReeSXMABJOyny4cJxRd2n6bk33f0tbK Ifut2wJxqGdkYcXr+irnPt2G/r0vHx28QnZtUusjn/y2F4CFeJ1DOXK9ZLyk2EUaYvPYlWa4GccV yKcbAEiRrfE7xsPCd2knHkTH ) ; Key ID = 29919`
	DNSKEY=2470/SEP is now in the chain-of-trust
	DS=2470/SHA-1 verifies DNSKEY=2470/SEP
	DS=2470/SHA-256 verifies DNSKEY=2470/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`bankcustomer.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20221204032431 20221127022431 2470 bankcustomer.gov. JYIMIdALdBQbW/PiPIiHPBvowIFz1o4HNm4tI+g5bqn4rsn7iTeOql9i5gR3P9bTWOfhZBp1RcGO dJaAzEL9GbriM4O+8MoW5nZY4kDgiW/EW+p+C31uYIkKmWHHxy7NaWT9lESG0wZR9aIpSwsPrS6H E6sLIXPsyIO/idrBfnQ= )`
	`bankcustomer.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20221204032431 20221127022431 46728 bankcustomer.gov. GJvVFU1+5m1U2kne9ZQp6oCgAOwBEOtzUuFFDS2grbdhYZ6G5bUDQnRxCHYFkuuN1rlioTlNFTFU EU7Bg0GsApdGgQ+BTtgJny8LbG66lzTvQyJX7V0zBgNvCYIqC/9B7zEZhb+G6rQPv6Kxg5Bt7v4s DThR6VvHshR6qGjYkEo= )`
	`bankcustomer.gov. 300 IN RRSIG ( DNSKEY 8 2 300 20221204032431 20221127022431 29919 bankcustomer.gov. sqld4RrDn9hZf/yppCcJa2SDqYn3Nfc1AOg+kygtG1aKpX0Qg3UiTpfQulvoRKo+XD0MunHQ7i5e rFvrE21SpgFGdoR6l1rwdfLCFaFMSR7/nSTgfib66g0Rb0Hr8Wzi2LEd93VUQWnG/tfeIIgD1twq cLg2ROeh34G9DzhtpA0= )`
	RRSIG=2470 and DNSKEY=2470/SEP verifies the DNSKEY RRset
	RRSIG=46728 and DNSKEY=46728 verifies the DNSKEY RRset
	RRSIG=29919 and DNSKEY=29919 verifies the DNSKEY RRset
	DNSKEY=46728 is now in the chain-of-trust
	DNSKEY=29919 is now in the chain-of-trust
	Query to ceextauth1.treasury.gov for bankcustomer.gov/A
	Received 413 bytes from 164.95.20.53
	;; Response received from 164.95.20.53 (413 octets) ;; HEADER SECTION ;; id = 12832 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bankcustomer.gov. IN A ;; ANSWER SECTION (3 records) bankcustomer.gov. 900 IN A 199.83.40.55 bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221205164443 20221128154443 46728 bankcustomer.gov. Ib0d3KeBH8CYYYTN3miol42fGj24W6gR/oyQpdXOXvqShA8bS/VCP1mOstgTQ5D0itOafCfJhjF3 oPgNokQq7tBLtMsrrj4wvcj7C02Pn4ZnQzyMMO5J6ksUVax+4EZQ1kCcZJKXAm4oNvZYF/y20vIs OsavulO/+R08wW/BFqE= ) bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221205164443 20221128154443 29919 bankcustomer.gov. krwiw87aCn86qhjWIZcd/hXZUOELdRzaQqO64pa/ermS6Ce+QH6YgkORPnNnp2dTmXB5ImV0e6Kz GJ4ZcNPaCB3xAjgnJDW9w8xX7LfVNwc3hRji5oRH/PP4r5yCFgIGtpfq8MWIWbkL90AcK1PiL4rh mC0hQwvp+OjPsBrGDDo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ceextauth1.treasury.gov is authoritative for bankcustomer.gov
	Found RRSIG signed by bankcustomer.gov zone
	Query to ns1.treasury.gov for bankcustomer.gov/SOA
	Received 2320 bytes from 166.123.208.249
	;; Response received from 166.123.208.249 (2320 octets) ;; HEADER SECTION ;; id = 24587 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bankcustomer.gov. IN SOA ;; ANSWER SECTION (3 records) bankcustomer.gov. 900 IN SOA ( ns1.treasury.gov. ecb-hosting.fiscal.treasury.gov. 104688 ;serial 3600 ;refresh 900 ;retry 1209600 ;expire 900 ;minimum ) bankcustomer.gov. 900 IN RRSIG ( SOA 8 2 900 20221204033019 20221127023019 46728 bankcustomer.gov. II/SbSAFrTiM0QJDGw+slykXxuf/jng0TmnvBVpmZOakSo5EE4hbXQlPqe/rqREnUzMmvfMJBcyF tULhviUMFtz9QQ1sMZ2FI/fbtIxrWCNuBJVOefaugZ+1iiJimHrQgjgfFYdV6tnd6g7FBg3NvvDR zsrnAgBsyKHGt5qocyM= ) bankcustomer.gov. 900 IN RRSIG ( SOA 8 2 900 20221204023448 20221127013448 29919 bankcustomer.gov. VkofvbFj8InJTGQ3sFm0doNtjrF70EqFBk0x8eQQE8ius1m0Ae0sWz8DfjefCfEPUtZeD3f5wiBH 9thKboiL7J8mNV15jZiTHgSoFJuzSf5aYW8/JldhCSLKPLRRy4sHai6r+NNiXSNC8j8arVDcXhEO 3jYgFADSwR6yCjF7wS4= ) ;; AUTHORITY SECTION (4 records) bankcustomer.gov. 900 IN NS ceextauth1.treasury.gov. bankcustomer.gov. 900 IN NS ns1.treasury.gov. bankcustomer.gov. 900 IN RRSIG ( NS 8 2 900 20221205172035 20221128162035 46728 bankcustomer.gov. BUy22grdetZxyOh+VSe0gIU7MpxRuACyh94QplPMPjX4N5eFjN+Dka4CME5Nm66DfH5NT1LL8o3b atvsLj/166KtanPYD5DD4myGOi3Y4UkwStOTl4BtNpcGwA61Cma/S20jY8hZ5oXZVNVovIWWw6XX G9/2I4Znoy6C/lq4wlU= ) bankcustomer.gov. 900 IN RRSIG ( NS 8 2 900 20221205172035 20221128162035 29919 bankcustomer.gov. a5hbkWCpovydBhEa9frt1PSUZoIkRI/Iq8hdzRgyKkwNw7qxlOcfqkJ0DzltTKhdYJSruqmMbG8y vkuz21/gV2qHR8CKIL7eVb+iwiqXMdByoUul+CVnJW16wYpbREBXLflZl5NEsSKXJbqPJTeFB5AB UJcTP3eZFSURb8TOs/Y= ) ;; ADDITIONAL SECTION (13 records) ns1.treasury.gov. 900 IN A 166.123.208.249 ns1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221205114608 20221128104608 6854 treasury.gov. D5FQjlpVL9yoAlxStsoAVMQKMAy7RLnW1PplsjVzY9h14qL4nQK3pwssOkgdK2REmU01tbb95+ml x74TeEw9mxUnKttyGgnFM2Ajrb3z/zUzNPHx/fSaTKbrlZE3hk4vEDhp+3r6x/mnqzn/N80N+117 yLy26x3gY9CR9pP9cXA= ) ns1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221204022425 20221127012425 10202 treasury.gov. rE6D/4s/0esR/CggOYDdOitYK7MK4PhUKKOWaxfoR6mlBgqULbVs3tR+qaltpsUiLNMhXfniGCw1 R/29LLRkz5rJcl2+KL3XSC73jHldTUTx7xkeEiHW1fJfn5171KpDRsyZBglMokhsr8DAGK0thaB9 zw7StMS1ZzTSvARRl4Y= ) ceextauth1.treasury.gov. 900 IN A 164.95.20.53 ceextauth1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221202183323 20221125173323 6854 treasury.gov. pOhvLDliK2spxe/7dGPoalR949TYc5AjhmZjeUnfBIbczoyDTceS21qwPCvb0BYIQVbQ7P2AUeir Xrox/0iYlKG59KcKIyJHNU3wtQMr0IxeBjh8NoEPmXJnJgoEZFGe5pw0N108zE5Cc/c0pT4SE4Bq LVSzqwi2I0rHSRL7hxE= ) ceextauth1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221204022425 20221127012425 10202 treasury.gov. ed1xSs37DhUdDCiM7PLil1hGKaO2owq4PoYrM7xAFGY2M0Eluh8Y+DDHstl14DGaU+LFtaUWrvTr YPR2YhlpJVE53tw0kkQbjLvazKGLKRK8ZVOC3LwRRNTjQ/cwUQr8IjzHVD8STyBDdASxhoZzB3tz I5osBUedT73c4AEgzUc= ) ns1.treasury.gov. 900 IN AAAA 2610:108:4000:100a::249 ns1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221203204857 20221126194857 6854 treasury.gov. HxWfHA9PRSuc8LsI2xnvwGgaUP66RhlsQVePlu6EgIMY20mIKDolRrNOI8PPB91C9bse38KzdPPD etN5nh8STkbApeunn534sdDL4PSpW46UK1kpvmniuYH1y3S8fDlrHh3wyOvsskBClSck99w7MK9k sSK/ieTuZsj0KJYBdJM= ) ns1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221204022425 20221127012425 10202 treasury.gov. Ic62EAyReLMdIolQZyLEw4WqoQr5RQOQ3c1InTUdjXumfksLwXlbi11uU7nbMrJAZM+f2yr4NUli e0138/zlwjtU63lIVWOXYTFOGeya+PmeHc2AxRaowby4MMevm//4ZMMBxP8kAIp8FgWJ2HqTPDK5 QwpO8vxSKx4BDWt+/6E= ) ceextauth1.treasury.gov. 900 IN AAAA 2610:108:3100:100a::20:53 ceextauth1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221202214243 20221125204243 6854 treasury.gov. mBR39k06MupCDuu1hvVuJKYe5+wzwOMMp5bNCL8kCWa/CWP4IL9ArDrUZ7mrCx9yYHK1pIuhRRes zCPjd2Gj23rmILsupScS3NzErH7hwVORtf7pvm2Px2geC6my81olDfi7s9uezLFxG7VXmU18sSgr 0At8DmT3RN7d9c5D9tw= ) ceextauth1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221204022425 20221127012425 10202 treasury.gov. OP5zGRWbpeCL6OdPmgd8YFstbNnm7yIq0W/7WKuaJn9bXUV9H7DaXjA8QXy2nqXQrXcfrSRXnwRt 71YUr7Qbw3M5uJlFAl/3WMdA/WbCrWAFmUHxRc+bYU5DPuQdvZvvZbCLBMhtVTMQEOqHySIzUqlr JAPdg7SDFYLOakN1eew= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ceextauth1.treasury.gov for bankcustomer.gov/A
	Received 413 bytes from 164.95.20.53
	;; Response received from 164.95.20.53 (413 octets) ;; HEADER SECTION ;; id = 60804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bankcustomer.gov. IN A ;; ANSWER SECTION (3 records) bankcustomer.gov. 900 IN A 199.83.40.55 bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221204015605 20221127005605 46728 bankcustomer.gov. II1P16W6OGGWQ3c6gidZSzkv1UuKko4NnZPGXpnhR7wk61qkkEtpa6hm3x/P+5Ec7BBVDaxB6a2c gyd/lvj3hGYjfPxDG1RkFq2eOjkhyGHzfIIm42nddWIBPDHyZyn6Em+qE0i12y2KSQunwg2A+KpG D1zbI4mIhcHTDcRveYk= ) bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221204025208 20221127015208 29919 bankcustomer.gov. h32BVfKCrt+vlpjxlWx4ze3q1XA/364kAb2Hk/c71u7MrLYclUU+inTm9cxiis84cTX5r6vK7dex IyE1V7N6dnW1Te25lqbIhMgTcehy90Ia3qPhB3D7gdUGtg8aQCQsc/ZNYwjx0WRE+pKq/7+Y9c3H SXqFknxZDZuycgsjL7Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bankcustomer.gov A RR has value 199.83.40.55
	Found 2 RRSIGs over A RRset
	`bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221204015605 20221127005605 46728 bankcustomer.gov. II1P16W6OGGWQ3c6gidZSzkv1UuKko4NnZPGXpnhR7wk61qkkEtpa6hm3x/P+5Ec7BBVDaxB6a2c gyd/lvj3hGYjfPxDG1RkFq2eOjkhyGHzfIIm42nddWIBPDHyZyn6Em+qE0i12y2KSQunwg2A+KpG D1zbI4mIhcHTDcRveYk= )`
	`bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221204025208 20221127015208 29919 bankcustomer.gov. h32BVfKCrt+vlpjxlWx4ze3q1XA/364kAb2Hk/c71u7MrLYclUU+inTm9cxiis84cTX5r6vK7dex IyE1V7N6dnW1Te25lqbIhMgTcehy90Ia3qPhB3D7gdUGtg8aQCQsc/ZNYwjx0WRE+pKq/7+Y9c3H SXqFknxZDZuycgsjL7Y= )`
	RRSIG=46728 and DNSKEY=46728 verifies the A RRset
	RRSIG=29919 and DNSKEY=29919 verifies the A RRset

bankcustomer.gov

	Query to ns1.treasury.gov for bankcustomer.gov/A
	Received 2281 bytes from 166.123.208.249
	;; Response received from 166.123.208.249 (2281 octets) ;; HEADER SECTION ;; id = 3077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bankcustomer.gov. IN A ;; ANSWER SECTION (3 records) bankcustomer.gov. 900 IN A 199.83.40.55 bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221201044140 20221124034140 46728 bankcustomer.gov. InfTAKNic+mOjLP9uPEmONqXg9tLw6MGxCTKCT8EFjljULXGp2CkLGkGLcH2CvUB9eFx2841kuSC LahQa3n+viazi0eqC6Iw/2gWi+SRgEOS2XEXgnLZ4VK32OFafG2zN0Yaqp9HPPyJ1+eXFj593TC2 ir/oP3fWLc6fDEjD4tg= ) bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221204023332 20221127013332 29919 bankcustomer.gov. I+2qlrKZkI/qMe3ugyGNHMK8X/cT/6e0qgrTy8VamU4fTDzXINn+V133hK8HZrXmJazl3rJs3qoD XbzWfBLCxpZDjSuyLXhDF5m4vxWapFbKzz7b7qkTfIICFhDsTmiu3naZi62R+Q+RRblKyv9zvrZr cAcYrxqPTu8NVExcTsA= ) ;; AUTHORITY SECTION (4 records) bankcustomer.gov. 900 IN NS ns1.treasury.gov. bankcustomer.gov. 900 IN NS ceextauth1.treasury.gov. bankcustomer.gov. 900 IN RRSIG ( NS 8 2 900 20221204015948 20221127005948 46728 bankcustomer.gov. WG7ylgtviZ8QZOg5tuuoQCUrgRbL3+NuOPsjPCOxUtxfamM7eEhoShncNfosRMZuRXoaRU7G+iPB w9pyg/liDQVFDYg3jjwrYf6LYMU/LnRm+CKL+0HiTKPbt5aoRd9hyHw7ofvCEin5PBUy9FozE1Qf TG0QM0u3Yu1nURy+6R8= ) bankcustomer.gov. 900 IN RRSIG ( NS 8 2 900 20221204023332 20221127013332 29919 bankcustomer.gov. s/h4umegz1yR5r8P6cUBxEQZEetOJSjvL/R+GvE2Q1tlBewqMAqch8DapdTUf0Hc0eSW4uZ2+ACQ zlwthzhLPy7TDGquhXbmw+5oe6flS192YD1X1FJpNFtChzdeT9GmTwhcjyboHPC+srtrx8uw2nSE mImGDTS6zUjME/vTPNI= ) ;; ADDITIONAL SECTION (13 records) ns1.treasury.gov. 900 IN A 166.123.208.249 ns1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221203204833 20221126194833 6854 treasury.gov. lTME3mhMEViJ3bOoUEkMOQjUWSMnVwi8GI/ARNQtq02MU5znCB+PIAhnuUG30dQ+RB4c2FnYyQWs MxXHCLxRKcEhIZbUXr/rX+zMdL5mQai8Zh5ZpCjE1MVbImTzoDMpYxhi9fi3VVEwEsKQhZgPX43Y QWgLoIjdffpr492bl9s= ) ns1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221204022425 20221127012425 10202 treasury.gov. rE6D/4s/0esR/CggOYDdOitYK7MK4PhUKKOWaxfoR6mlBgqULbVs3tR+qaltpsUiLNMhXfniGCw1 R/29LLRkz5rJcl2+KL3XSC73jHldTUTx7xkeEiHW1fJfn5171KpDRsyZBglMokhsr8DAGK0thaB9 zw7StMS1ZzTSvARRl4Y= ) ceextauth1.treasury.gov. 900 IN A 164.95.20.53 ceextauth1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221205163424 20221128153424 6854 treasury.gov. lBXaUUHvDQy1UXbkdOKJRpE/GQt7tjUxcQqwgQTV4SzwElWVI6WIFbnhaSuQ8/mlLwZh0VERx4FR XOTliy89Zr+ZJD4ViRRN/p+Wx1Sz0NTzznXPGrs9LPftnBg6gFBPfUY+rVjSOc9NCA7fM/g1bpcJ vzWDTq5CV6RYNHwS9to= ) ceextauth1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221205163424 20221128153424 10202 treasury.gov. E9ubfUnt+e7UCL9sCQ5edf6sjYXwe62hHMuVMB77stPZWCwBiIXTRyzG6/NKMnsDG2UzqbOEfTrC 4ERBeZprlw9YyLuciTIGqwJ1TCQC9iwqaQ4uK91eiTtr6HiZUuVbW0hvvWREry5U8rOpjewhiQGg esuDBQQ3QhbFKSOGw6A= ) ns1.treasury.gov. 900 IN AAAA 2610:108:4000:100a::249 ns1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221205094325 20221128084325 6854 treasury.gov. LE2NMcKeH0jGs/Fdhbkpj4o0/7z2yCjFlSoPs3V9OIUTFPIZcqf5FpZCh8K5oWtx0MvYcyIS1PXb 4gxFa9K8kMiO6KqLb9gY7xnG7SvyjUxaGSNNi+D6KNrgJdrJZ8AEcZq7eu4TP28E+0xZWUHgK3xk 2PIWHjXIApjbKDvAj80= ) ns1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221204022425 20221127012425 10202 treasury.gov. Ic62EAyReLMdIolQZyLEw4WqoQr5RQOQ3c1InTUdjXumfksLwXlbi11uU7nbMrJAZM+f2yr4NUli e0138/zlwjtU63lIVWOXYTFOGeya+PmeHc2AxRaowby4MMevm//4ZMMBxP8kAIp8FgWJ2HqTPDK5 QwpO8vxSKx4BDWt+/6E= ) ceextauth1.treasury.gov. 900 IN AAAA 2610:108:3100:100a::20:53 ceextauth1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221205163424 20221128153424 6854 treasury.gov. Hu1aIdmX9fd8/+X3NkvtcadGWMVM9x2tfUCaA0dcTN6XJK9RGLToX2cCN0V5UjwmpYsWJOH8z3kQ 2LgPI+B98dXyZ6mjgxiqxNiIf41cY4f4x76zwDd4d8SAA53n1ltJupG9/y+eOYK5ZnkBvlybV7S0 LNLUjDnEyhxl9RvJLGM= ) ceextauth1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221205163424 20221128153424 10202 treasury.gov. FHxtF8icc7gi4cXtlmLR8rdYvTYq6cs+3m0pTvEmxilkaFm5j5iPZIpKmwVOxc7KNh++zYDk2oXl vRHpSs8MDGSzv/UYwXR4SoXozo83TyCy973GC6p9tg/qGcPnIaHXT8OirjYrvI4wRjdUZG0OOe2p gJDEWBUj7jnkPt8FAO8= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.treasury.gov is authoritative for bankcustomer.gov
	Found RRSIG signed by bankcustomer.gov zone
	Query to ns1.treasury.gov for bankcustomer.gov/A
	Received 2281 bytes from 166.123.208.249
	;; Response received from 166.123.208.249 (2281 octets) ;; HEADER SECTION ;; id = 42111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bankcustomer.gov. IN A ;; ANSWER SECTION (3 records) bankcustomer.gov. 900 IN A 199.83.40.55 bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221204033007 20221127023007 46728 bankcustomer.gov. IJlPWj0C1HLAzjV8BQPSfEOwJpfU/xkJjRC2ZARRj4PHV0ov4JPHK8s977ufqLvIvGNzZnbExNM8 JedtBosUzplggsE4Miw4sLZZ6lrZ5bA92YDDpaVNf9y6pKr1v9OiFJ8BBj7SPlOPX5ofL7WfXZRh ZLVDgZwyWn4vgB8S46E= ) bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221204023332 20221127013332 29919 bankcustomer.gov. I+2qlrKZkI/qMe3ugyGNHMK8X/cT/6e0qgrTy8VamU4fTDzXINn+V133hK8HZrXmJazl3rJs3qoD XbzWfBLCxpZDjSuyLXhDF5m4vxWapFbKzz7b7qkTfIICFhDsTmiu3naZi62R+Q+RRblKyv9zvrZr cAcYrxqPTu8NVExcTsA= ) ;; AUTHORITY SECTION (4 records) bankcustomer.gov. 900 IN NS ceextauth1.treasury.gov. bankcustomer.gov. 900 IN NS ns1.treasury.gov. bankcustomer.gov. 900 IN RRSIG ( NS 8 2 900 20221205172035 20221128162035 46728 bankcustomer.gov. BUy22grdetZxyOh+VSe0gIU7MpxRuACyh94QplPMPjX4N5eFjN+Dka4CME5Nm66DfH5NT1LL8o3b atvsLj/166KtanPYD5DD4myGOi3Y4UkwStOTl4BtNpcGwA61Cma/S20jY8hZ5oXZVNVovIWWw6XX G9/2I4Znoy6C/lq4wlU= ) bankcustomer.gov. 900 IN RRSIG ( NS 8 2 900 20221205172035 20221128162035 29919 bankcustomer.gov. a5hbkWCpovydBhEa9frt1PSUZoIkRI/Iq8hdzRgyKkwNw7qxlOcfqkJ0DzltTKhdYJSruqmMbG8y vkuz21/gV2qHR8CKIL7eVb+iwiqXMdByoUul+CVnJW16wYpbREBXLflZl5NEsSKXJbqPJTeFB5AB UJcTP3eZFSURb8TOs/Y= ) ;; ADDITIONAL SECTION (13 records) ns1.treasury.gov. 900 IN A 166.123.208.249 ns1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221205114608 20221128104608 6854 treasury.gov. D5FQjlpVL9yoAlxStsoAVMQKMAy7RLnW1PplsjVzY9h14qL4nQK3pwssOkgdK2REmU01tbb95+ml x74TeEw9mxUnKttyGgnFM2Ajrb3z/zUzNPHx/fSaTKbrlZE3hk4vEDhp+3r6x/mnqzn/N80N+117 yLy26x3gY9CR9pP9cXA= ) ns1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221204022425 20221127012425 10202 treasury.gov. rE6D/4s/0esR/CggOYDdOitYK7MK4PhUKKOWaxfoR6mlBgqULbVs3tR+qaltpsUiLNMhXfniGCw1 R/29LLRkz5rJcl2+KL3XSC73jHldTUTx7xkeEiHW1fJfn5171KpDRsyZBglMokhsr8DAGK0thaB9 zw7StMS1ZzTSvARRl4Y= ) ceextauth1.treasury.gov. 900 IN A 164.95.20.53 ceextauth1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221202183323 20221125173323 6854 treasury.gov. pOhvLDliK2spxe/7dGPoalR949TYc5AjhmZjeUnfBIbczoyDTceS21qwPCvb0BYIQVbQ7P2AUeir Xrox/0iYlKG59KcKIyJHNU3wtQMr0IxeBjh8NoEPmXJnJgoEZFGe5pw0N108zE5Cc/c0pT4SE4Bq LVSzqwi2I0rHSRL7hxE= ) ceextauth1.treasury.gov. 900 IN RRSIG ( A 7 3 900 20221204022425 20221127012425 10202 treasury.gov. ed1xSs37DhUdDCiM7PLil1hGKaO2owq4PoYrM7xAFGY2M0Eluh8Y+DDHstl14DGaU+LFtaUWrvTr YPR2YhlpJVE53tw0kkQbjLvazKGLKRK8ZVOC3LwRRNTjQ/cwUQr8IjzHVD8STyBDdASxhoZzB3tz I5osBUedT73c4AEgzUc= ) ns1.treasury.gov. 900 IN AAAA 2610:108:4000:100a::249 ns1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221203204857 20221126194857 6854 treasury.gov. HxWfHA9PRSuc8LsI2xnvwGgaUP66RhlsQVePlu6EgIMY20mIKDolRrNOI8PPB91C9bse38KzdPPD etN5nh8STkbApeunn534sdDL4PSpW46UK1kpvmniuYH1y3S8fDlrHh3wyOvsskBClSck99w7MK9k sSK/ieTuZsj0KJYBdJM= ) ns1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221204022425 20221127012425 10202 treasury.gov. Ic62EAyReLMdIolQZyLEw4WqoQr5RQOQ3c1InTUdjXumfksLwXlbi11uU7nbMrJAZM+f2yr4NUli e0138/zlwjtU63lIVWOXYTFOGeya+PmeHc2AxRaowby4MMevm//4ZMMBxP8kAIp8FgWJ2HqTPDK5 QwpO8vxSKx4BDWt+/6E= ) ceextauth1.treasury.gov. 900 IN AAAA 2610:108:3100:100a::20:53 ceextauth1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221202214243 20221125204243 6854 treasury.gov. mBR39k06MupCDuu1hvVuJKYe5+wzwOMMp5bNCL8kCWa/CWP4IL9ArDrUZ7mrCx9yYHK1pIuhRRes zCPjd2Gj23rmILsupScS3NzErH7hwVORtf7pvm2Px2geC6my81olDfi7s9uezLFxG7VXmU18sSgr 0At8DmT3RN7d9c5D9tw= ) ceextauth1.treasury.gov. 900 IN RRSIG ( AAAA 7 3 900 20221204022425 20221127012425 10202 treasury.gov. OP5zGRWbpeCL6OdPmgd8YFstbNnm7yIq0W/7WKuaJn9bXUV9H7DaXjA8QXy2nqXQrXcfrSRXnwRt 71YUr7Qbw3M5uJlFAl/3WMdA/WbCrWAFmUHxRc+bYU5DPuQdvZvvZbCLBMhtVTMQEOqHySIzUqlr JAPdg7SDFYLOakN1eew= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bankcustomer.gov A RR has value 199.83.40.55
	Found 2 RRSIGs over A RRset
	`bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221204033007 20221127023007 46728 bankcustomer.gov. IJlPWj0C1HLAzjV8BQPSfEOwJpfU/xkJjRC2ZARRj4PHV0ov4JPHK8s977ufqLvIvGNzZnbExNM8 JedtBosUzplggsE4Miw4sLZZ6lrZ5bA92YDDpaVNf9y6pKr1v9OiFJ8BBj7SPlOPX5ofL7WfXZRh ZLVDgZwyWn4vgB8S46E= )`
	`bankcustomer.gov. 900 IN RRSIG ( A 8 2 900 20221204023332 20221127013332 29919 bankcustomer.gov. I+2qlrKZkI/qMe3ugyGNHMK8X/cT/6e0qgrTy8VamU4fTDzXINn+V133hK8HZrXmJazl3rJs3qoD XbzWfBLCxpZDjSuyLXhDF5m4vxWapFbKzz7b7qkTfIICFhDsTmiu3naZi62R+Q+RRblKyv9zvrZr cAcYrxqPTu8NVExcTsA= )`
	RRSIG=46728 and DNSKEY=46728 verifies the A RRset
	RRSIG=29919 and DNSKEY=29919 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bankcustomer.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: