DNSSEC Analyzer - regulations.gov

Domain Name:

Time: 2021-10-16 11:32:26 UTC, NTP stratum 16

Analyzing DNSSEC problems for regulations.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (865 octets) ;; HEADER SECTION ;; id = 25908 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	Query to l.root-servers.net for regulations.gov/A
	Received 634 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (634 octets) ;; HEADER SECTION ;; id = 8389 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for gov/DNSKEY
	Received 622 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (622 octets) ;; HEADER SECTION ;; id = 59147 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS d.gov-servers.net. gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN A 209.112.123.30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN A 69.36.153.30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN A 81.19.194.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone gov

gov

	Checking DS between . and gov
	Query to e.root-servers.net for gov/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (367 octets) ;; HEADER SECTION ;; id = 11239 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for gov in the . zone
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . HsJvcdYGrK2gYrexKsauiv5LuMkG2Ou4sPWh/bH2g0sRem2TWaOZis755LSMI3BlVNhyJ66tbcGh 73hdyyXEv9j+6Jz8Cq3oglTVuO0Mei3V9TP1zZzpAjmaAUkbIQUPH/icJ7S6NvInu3kHcH8rteaA URFMBsM10SoK8OHLpp+mr58m7Ii4N4aU+fQXC0JspMjhJwVgrw4JxeCQaKBPue19UcOHqR7evgej KZ2Zb3GUzrxoAKoHrYLUuqEhhMi7J0eYXJhdSy+AbvDBPGQuasRKZdCquSXDIgiFvnZrKLrThnp8 pBk0Q6Awz/piYbLGrzVIlGu9Mg+rJYTTFpdmew== )`
	RRSIG=14748 and DNSKEY=14748 verifies the DS RRset
	DS=7698/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to b.gov-servers.net for gov/DNSKEY
	Received 957 bytes from 209.112.123.30
	;; Response received from 209.112.123.30 (957 octets) ;; HEADER SECTION ;; id = 19968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (4 records) gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAa3P+8n+GirNhbYEPYFwmMnTA1mFaJrXBX/+HB6zAOiQNrj73Itfm0sdk1PX4wkHEgvP3Mis rlHqKS8o/gzkYetRB7GpfIiG9KMih3Oq0zi0hB0ItG2DlE9VfW83TRRBVfUI5wSydNofIVnvkYFQ jLPYzy1B9mIHGqYMtpxjY7KCkyYcKMWWhbmF0Uk4WrHJcYZlkiTMH7k1SHamjrGDed0= ) ; Key ID = 6229 gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735 gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211021190254 20211006185754 7698 gov. QqvXIYkuB/aqOpBTzjLaFDWG/LeBqmala3EDo6eUenbRKd+jmMqdY5nT2auZyajQ08eAAQitd8Be 1WG7aGUOuBZ1G4bK1blM4izJvjJcni3tHo9BIAAPk0MF8o1CmqOBoHQYv4gfspjH4LNJE7q96nLa uobGpjiMSwZi2OXOSlu1ZA4qeax1UA4/dVSqPhtDVqACSx11UV+SYir5rxOd/3/4lzRZQf7SQ1kw JlQg+/vCLxVzgXTGdaoTzmoqG8aQxTc7+lSW4Gf06J7tIVO3QBH5lN7QWYqHtGs2zfxnK71bcILx p7zVagLI+ZpXPe4V335kmuKVaUgLq5ilu18HbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for gov
	`gov. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAa3P+8n+GirNhbYEPYFwmMnTA1mFaJrXBX/+HB6zAOiQNrj73Itfm0sdk1PX4wkHEgvP3Mis rlHqKS8o/gzkYetRB7GpfIiG9KMih3Oq0zi0hB0ItG2DlE9VfW83TRRBVfUI5wSydNofIVnvkYFQ jLPYzy1B9mIHGqYMtpxjY7KCkyYcKMWWhbmF0Uk4WrHJcYZlkiTMH7k1SHamjrGDed0= ) ; Key ID = 6229`
	`gov. 86400 IN DNSKEY ( 256 3 8 AwEAAdfjPT+uxmm9v6KKrQxtXTaa8msI9el/N3dzk2ReFJban378/fN3Pxc0DDq6zw6iBkTdzTsN NDtRvTbdK7uYfrSiPrZ8sPd2jeugzdNw7zpGzW8+cGmjA+0lETYgbE+0ivR+NDheYbcM+zOW9M8f +qTaer6tmgWxqLFNI32TP6RdFr/yfMCTDoEe+JuedI2yi0X3zVDMqV/wnedEeKrWsvc= ) ; Key ID = 57735`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 86400 IN RRSIG ( DNSKEY 8 1 86400 20211021190254 20211006185754 7698 gov. QqvXIYkuB/aqOpBTzjLaFDWG/LeBqmala3EDo6eUenbRKd+jmMqdY5nT2auZyajQ08eAAQitd8Be 1WG7aGUOuBZ1G4bK1blM4izJvjJcni3tHo9BIAAPk0MF8o1CmqOBoHQYv4gfspjH4LNJE7q96nLa uobGpjiMSwZi2OXOSlu1ZA4qeax1UA4/dVSqPhtDVqACSx11UV+SYir5rxOd/3/4lzRZQf7SQ1kw JlQg+/vCLxVzgXTGdaoTzmoqG8aQxTc7+lSW4Gf06J7tIVO3QBH5lN7QWYqHtGs2zfxnK71bcILx p7zVagLI+ZpXPe4V335kmuKVaUgLq5ilu18HbQ== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=6229 is now in the chain-of-trust
	DNSKEY=57735 is now in the chain-of-trust
	Query to d.gov-servers.net for regulations.gov/A
	Received 587 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (587 octets) ;; HEADER SECTION ;; id = 61588 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) regulations.gov. 86400 IN NS pydns2.epa.gov. regulations.gov. 86400 IN NS rtpns1.epa.gov. regulations.gov. 86400 IN NS rtpns2.epa.gov. regulations.gov. 86400 IN NS pydns1.epa.gov. regulations.gov. 3600 IN DS ( 35314 8 1 ab474d82da7a3cbcc3e7ff3de05345090c705adb ) regulations.gov. 3600 IN DS ( 35314 8 2 8402d57846f7d2ecc136a046ebbb6698bb69a564b1fb2d7cdbffabbbbd9d7dd2 ) regulations.gov. 3600 IN RRSIG ( DS 8 2 3600 20211022194227 20211015194227 6229 gov. BC7E67ppaT2NbdxmBeoJxB4QyEW8b369+hpBOHz/OekWtFr22o6TQOzVS3Ks2NFXsGQJ+O81D7oV cN/clm8H0+XX8Jq3VaqyEkVFSh4uuhZ51F7rdHPEL8GM6TAeobcg4Z/BoPp85gCn/nlyeswrUWjw VhYxyQQs44QOjN31vnRynBizEiBUh5Z72kJPkRsgsbxJsbjRTB2BsQ53OxnM0w== ) ;; ADDITIONAL SECTION (9 records) pydns2.epa.gov. 86400 IN A 161.80.212.12 pydns2.epa.gov. 86400 IN AAAA 2620:117:5071:d4::f00c rtpns1.epa.gov. 86400 IN A 134.67.12.10 rtpns1.epa.gov. 86400 IN AAAA 2620:117:506f:c::f00a rtpns2.epa.gov. 86400 IN A 134.67.12.12 rtpns2.epa.gov. 86400 IN AAAA 2620:117:506f:c::f00c pydns1.epa.gov. 86400 IN A 161.80.212.10 pydns1.epa.gov. 86400 IN AAAA 2620:117:5071:d4::f00a ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.gov-servers.net for regulations.gov/DNSKEY
	Received 587 bytes from 81.19.194.30
	;; Response received from 81.19.194.30 (587 octets) ;; HEADER SECTION ;; id = 43858 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) regulations.gov. 86400 IN NS pydns2.epa.gov. regulations.gov. 86400 IN NS rtpns1.epa.gov. regulations.gov. 86400 IN NS rtpns2.epa.gov. regulations.gov. 86400 IN NS pydns1.epa.gov. regulations.gov. 3600 IN DS ( 35314 8 1 ab474d82da7a3cbcc3e7ff3de05345090c705adb ) regulations.gov. 3600 IN DS ( 35314 8 2 8402d57846f7d2ecc136a046ebbb6698bb69a564b1fb2d7cdbffabbbbd9d7dd2 ) regulations.gov. 3600 IN RRSIG ( DS 8 2 3600 20211022194227 20211015194227 6229 gov. BC7E67ppaT2NbdxmBeoJxB4QyEW8b369+hpBOHz/OekWtFr22o6TQOzVS3Ks2NFXsGQJ+O81D7oV cN/clm8H0+XX8Jq3VaqyEkVFSh4uuhZ51F7rdHPEL8GM6TAeobcg4Z/BoPp85gCn/nlyeswrUWjw VhYxyQQs44QOjN31vnRynBizEiBUh5Z72kJPkRsgsbxJsbjRTB2BsQ53OxnM0w== ) ;; ADDITIONAL SECTION (9 records) pydns2.epa.gov. 86400 IN A 161.80.212.12 pydns2.epa.gov. 86400 IN AAAA 2620:117:5071:d4::f00c rtpns1.epa.gov. 86400 IN A 134.67.12.10 rtpns1.epa.gov. 86400 IN AAAA 2620:117:506f:c::f00a rtpns2.epa.gov. 86400 IN A 134.67.12.12 rtpns2.epa.gov. 86400 IN AAAA 2620:117:506f:c::f00c pydns1.epa.gov. 86400 IN A 161.80.212.10 pydns1.epa.gov. 86400 IN AAAA 2620:117:5071:d4::f00a ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone regulations.gov

regulations.gov

	Checking DS between gov and regulations.gov
	Query to c.gov-servers.net for regulations.gov/DS
	Received 323 bytes from 69.36.153.30
	;; Response received from 69.36.153.30 (323 octets) ;; HEADER SECTION ;; id = 13518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN DS ;; ANSWER SECTION (3 records) regulations.gov. 3600 IN DS ( 35314 8 1 ab474d82da7a3cbcc3e7ff3de05345090c705adb ) regulations.gov. 3600 IN DS ( 35314 8 2 8402d57846f7d2ecc136a046ebbb6698bb69a564b1fb2d7cdbffabbbbd9d7dd2 ) regulations.gov. 3600 IN RRSIG ( DS 8 2 3600 20211022194227 20211015194227 6229 gov. BC7E67ppaT2NbdxmBeoJxB4QyEW8b369+hpBOHz/OekWtFr22o6TQOzVS3Ks2NFXsGQJ+O81D7oV cN/clm8H0+XX8Jq3VaqyEkVFSh4uuhZ51F7rdHPEL8GM6TAeobcg4Z/BoPp85gCn/nlyeswrUWjw VhYxyQQs44QOjN31vnRynBizEiBUh5Z72kJPkRsgsbxJsbjRTB2BsQ53OxnM0w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for regulations.gov in the gov zone
	DS=35314/SHA-1 has algorithm RSASHA256
	DS=35314/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`regulations.gov. 3600 IN RRSIG ( DS 8 2 3600 20211022194227 20211015194227 6229 gov. BC7E67ppaT2NbdxmBeoJxB4QyEW8b369+hpBOHz/OekWtFr22o6TQOzVS3Ks2NFXsGQJ+O81D7oV cN/clm8H0+XX8Jq3VaqyEkVFSh4uuhZ51F7rdHPEL8GM6TAeobcg4Z/BoPp85gCn/nlyeswrUWjw VhYxyQQs44QOjN31vnRynBizEiBUh5Z72kJPkRsgsbxJsbjRTB2BsQ53OxnM0w== )`
	RRSIG=6229 and DNSKEY=6229 verifies the DS RRset
	DS=35314/SHA-1 is now in the chain-of-trust
	`regulations.gov. 3600 IN DS ( 35314 8 1 ab474d82da7a3cbcc3e7ff3de05345090c705adb )`
	`regulations.gov. 3600 IN DS ( 35314 8 2 8402d57846f7d2ecc136a046ebbb6698bb69a564b1fb2d7cdbffabbbbd9d7dd2 )`
	Query to rtpns1.epa.gov for regulations.gov/DNSKEY
	Received 1094 bytes from 134.67.12.10
	;; Response received from 134.67.12.10 (1094 octets) ;; HEADER SECTION ;; id = 50637 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN DNSKEY ;; ANSWER SECTION (5 records) regulations.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAe1CgxR8naauhWIlGciUHlIHKB6kZT7pzAkdwW7aesGg2mdW5r4utgrDv9Qha/t4/+fsGChM sxSmIbJemrVz3D4bjtdMgi+7o3Er83FCeVI/W/FYyKzg3+POEYXOiA8oHTW7rJ3ec7qZMYt/ZCi6 ynjVlY5VLpMgdjaumG6OWG9AZE3xhCdQ2KtfXs4t5z3WAEq9RDw1W5gTyOIFAHjKCigxDRLYD16g +UmYV7bvCyQWFrneYtXBPHHj7b8/A7T8aR/mZL8bWUVrO+NgE8T3Nktz2t3EghEImt9XhtAPrlYc 4GEZVu/xIgma5vIyGl1TazwNFiUnoZLEFv+Q8yRUmFk= ) ; Key ID = 35314 regulations.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAdvmQMx4mKwI3VN8SNRcVbJZ7XXmKYitGrxGT+z+4WZlfonAOKt1Au8LVE85TD1IleQt3CH7 Yx9udmeUfUyV1RyQyXX85VyjoiCeSxU0XeRHkGABChRJPG4+vNbKheooVDgEjSOB84f0OWHGDSXz eXdsJo1Nu4gGXhRCpoVXPKfz ) ; Key ID = 25980 regulations.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAb2dU5D6iuarB1vVBStQC3/IEh/tr0fpOEqQ8OHAd0QEUJ6vQ7YkEf+Dv8IWiNL7C4zLWfFd NLvbTVun/vBshqfQkCo414mB1d4a08VKydNRlouj/v9vrWAcGBGWPGG4X/dSw3VPUPhA+ojgM5Er CaA/0H78B6OcntUvZ98ssRvN ) ; Key ID = 22896 regulations.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20211107234555 20211008224555 22896 regulations.gov. amh8AIe9ij7UDOx6EMqzm3L04BI5aUaz4Rn3ONbxZEDuN2wbaUWIQnqYDkMtN2eD9A4mce6Emjpu AFnfl0B3cg52FOCKNndA2fEzCR336/wLtDIH5H5Us3j/B//KFGW86KtI6/Sf8ufv15ldQBC5cc3i 54Cl7+ThreO2YRUqYFA= ) regulations.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20211107234555 20211008224555 35314 regulations.gov. nfO1jPtzeE9u1BsFaPxqQrBWk+aecCFYuhsPY+lC3Aajcj3EFRwOh1TG6mrgnpAmS3U2CqOMTqpu BgaI8r0x29QtmmzKWT80JfLwbzimfKEN+Ag4NSD3IUIz1Wg6OsSPGq+dDeJwJI3YZTVw+oG1lkV4 wwDsgkHUYv/fWd7cw24u0FrgKJhBgk3tEuY40PN1F+F4VavNw4ZFNbvsDEZJguE3MApzyVVFeeBi urzlhs3WMHUJdTJ+EqBgLh4y8BAndFRMbG2ofisrhHgAciAtjFomhHW+N50lfPdSpWECSQNSaieD uojtq3nvvDckIGoR35vSDW+uSIqbQiZ04VXOyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for regulations.gov
	`regulations.gov. 1296000 IN DNSKEY ( 257 3 8 AwEAAe1CgxR8naauhWIlGciUHlIHKB6kZT7pzAkdwW7aesGg2mdW5r4utgrDv9Qha/t4/+fsGChM sxSmIbJemrVz3D4bjtdMgi+7o3Er83FCeVI/W/FYyKzg3+POEYXOiA8oHTW7rJ3ec7qZMYt/ZCi6 ynjVlY5VLpMgdjaumG6OWG9AZE3xhCdQ2KtfXs4t5z3WAEq9RDw1W5gTyOIFAHjKCigxDRLYD16g +UmYV7bvCyQWFrneYtXBPHHj7b8/A7T8aR/mZL8bWUVrO+NgE8T3Nktz2t3EghEImt9XhtAPrlYc 4GEZVu/xIgma5vIyGl1TazwNFiUnoZLEFv+Q8yRUmFk= ) ; Key ID = 35314`
	`regulations.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAdvmQMx4mKwI3VN8SNRcVbJZ7XXmKYitGrxGT+z+4WZlfonAOKt1Au8LVE85TD1IleQt3CH7 Yx9udmeUfUyV1RyQyXX85VyjoiCeSxU0XeRHkGABChRJPG4+vNbKheooVDgEjSOB84f0OWHGDSXz eXdsJo1Nu4gGXhRCpoVXPKfz ) ; Key ID = 25980`
	`regulations.gov. 1296000 IN DNSKEY ( 256 3 8 AwEAAb2dU5D6iuarB1vVBStQC3/IEh/tr0fpOEqQ8OHAd0QEUJ6vQ7YkEf+Dv8IWiNL7C4zLWfFd NLvbTVun/vBshqfQkCo414mB1d4a08VKydNRlouj/v9vrWAcGBGWPGG4X/dSw3VPUPhA+ojgM5Er CaA/0H78B6OcntUvZ98ssRvN ) ; Key ID = 22896`
	DNSKEY=35314/SEP is now in the chain-of-trust
	DS=35314/SHA-1 verifies DNSKEY=35314/SEP
	DS=35314/SHA-256 verifies DNSKEY=35314/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`regulations.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20211107234555 20211008224555 22896 regulations.gov. amh8AIe9ij7UDOx6EMqzm3L04BI5aUaz4Rn3ONbxZEDuN2wbaUWIQnqYDkMtN2eD9A4mce6Emjpu AFnfl0B3cg52FOCKNndA2fEzCR336/wLtDIH5H5Us3j/B//KFGW86KtI6/Sf8ufv15ldQBC5cc3i 54Cl7+ThreO2YRUqYFA= )`
	`regulations.gov. 1296000 IN RRSIG ( DNSKEY 8 2 1296000 20211107234555 20211008224555 35314 regulations.gov. nfO1jPtzeE9u1BsFaPxqQrBWk+aecCFYuhsPY+lC3Aajcj3EFRwOh1TG6mrgnpAmS3U2CqOMTqpu BgaI8r0x29QtmmzKWT80JfLwbzimfKEN+Ag4NSD3IUIz1Wg6OsSPGq+dDeJwJI3YZTVw+oG1lkV4 wwDsgkHUYv/fWd7cw24u0FrgKJhBgk3tEuY40PN1F+F4VavNw4ZFNbvsDEZJguE3MApzyVVFeeBi urzlhs3WMHUJdTJ+EqBgLh4y8BAndFRMbG2ofisrhHgAciAtjFomhHW+N50lfPdSpWECSQNSaieD uojtq3nvvDckIGoR35vSDW+uSIqbQiZ04VXOyA== )`
	RRSIG=22896 and DNSKEY=22896 verifies the DNSKEY RRset
	RRSIG=35314 and DNSKEY=35314/SEP verifies the DNSKEY RRset
	DNSKEY=25980 is now in the chain-of-trust
	DNSKEY=22896 is now in the chain-of-trust
	Query to pydns1.epa.gov for regulations.gov/A
	Received 235 bytes from 161.80.212.10
	;; Response received from 161.80.212.10 (235 octets) ;; HEADER SECTION ;; id = 36524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN A ;; ANSWER SECTION (2 records) regulations.gov. 600 IN A 134.67.98.71 regulations.gov. 600 IN RRSIG ( A 8 2 600 20211114050442 20211015044928 22896 regulations.gov. VrAchSoL68FqGgQ4IvH5AH2FpSYb343SPEEHJFx9jK3brRktYKapQ2ylb8i7+Djj3gPOHICz7EqE aOjSkxYSbKr8B7BHQpbyDs145InOdD4EhEj9vHzrENeo+ZCh6AxXvItyeOFUk4/jVT+KREX00I2E Uck7jBQ+zIPHEIA1FQE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	pydns1.epa.gov is authoritative for regulations.gov
	Found RRSIG signed by regulations.gov zone
	Query to rtpns2.epa.gov for regulations.gov/SOA
	Received 275 bytes from 134.67.12.12
	;; Response received from 134.67.12.12 (275 octets) ;; HEADER SECTION ;; id = 25700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN SOA ;; ANSWER SECTION (2 records) regulations.gov. 600 IN SOA ( rtpns2.epa.gov. dnsadmin.epa.gov. 3341 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) regulations.gov. 600 IN RRSIG ( SOA 8 2 600 20211107234555 20211008224555 22896 regulations.gov. bf8cPtGoVnMonAcjq/5rGWOMqqH2VIXIXhesO20AhUvWsZJYf+kK6CBgAFWHvpUCTjxQgUpSpjBS jgERp/AX+LEkey7czbQlFrTxFHq4RlcsAOJj+22Bn9T5MxQOqE934SocVITX5m3sbQxew/8WI7Hu YkfxWgpFvLX+48okbzw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to rtpns1.epa.gov for regulations.gov/SOA
	Received 275 bytes from 134.67.12.10
	;; Response received from 134.67.12.10 (275 octets) ;; HEADER SECTION ;; id = 35129 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN SOA ;; ANSWER SECTION (2 records) regulations.gov. 600 IN SOA ( rtpns1.epa.gov. dnsadmin.epa.gov. 3634 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) regulations.gov. 600 IN RRSIG ( SOA 8 2 600 20211107234555 20211008224555 22896 regulations.gov. T5CHEsQUcY94pZap93lz4tG9n8ZY86Jzk/tzikMTKcZuuhqpUUczp7VzzTl9s0E/toHd1yoIWlFu JfoKUegh//1wg7BJMcKoTtyO7WWFRjsrhLciTcMiDqLNwVUufQm5HIiNesO+QUkkvNDgyvsCMCEh LUkkrtIl0FtC43hTt90= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rtpns1.epa.gov serial (3634) differs from rtpns2.epa.gov serial (3341)
	Query to pydns2.epa.gov for regulations.gov/SOA
	Received 275 bytes from 161.80.212.12
	;; Response received from 161.80.212.12 (275 octets) ;; HEADER SECTION ;; id = 41271 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN SOA ;; ANSWER SECTION (2 records) regulations.gov. 600 IN SOA ( pydns2.epa.gov. dnsadmin.epa.gov. 3143 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 600 ;minimum ) regulations.gov. 600 IN RRSIG ( SOA 8 2 600 20211107234555 20211008224555 22896 regulations.gov. tuy/ZgLMweZpZDj03scoqtk2vi3Kxl1D7xL6QG6CqiOAwoY2On6bqR72QkNoMbuV3m5VtPdzvsSC ej+cNNkI6SmqIHNSQVoKku7P9C6Ws/22RaoxUjg39cFL00N5Nq8xvnqJqbnwu6cghmBZI58i3W4n /Ybo8JOo/J7N10/wZzY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	pydns2.epa.gov serial (3143) differs from rtpns2.epa.gov serial (3341)
	Query to pydns1.epa.gov for regulations.gov/A
	Received 235 bytes from 161.80.212.10
	;; Response received from 161.80.212.10 (235 octets) ;; HEADER SECTION ;; id = 57813 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN A ;; ANSWER SECTION (2 records) regulations.gov. 600 IN A 134.67.98.71 regulations.gov. 600 IN RRSIG ( A 8 2 600 20211114050442 20211015044928 22896 regulations.gov. VrAchSoL68FqGgQ4IvH5AH2FpSYb343SPEEHJFx9jK3brRktYKapQ2ylb8i7+Djj3gPOHICz7EqE aOjSkxYSbKr8B7BHQpbyDs145InOdD4EhEj9vHzrENeo+ZCh6AxXvItyeOFUk4/jVT+KREX00I2E Uck7jBQ+zIPHEIA1FQE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	regulations.gov A RR has value 134.67.98.71
	Found 1 RRSIGs over A RRset
	`regulations.gov. 600 IN RRSIG ( A 8 2 600 20211114050442 20211015044928 22896 regulations.gov. VrAchSoL68FqGgQ4IvH5AH2FpSYb343SPEEHJFx9jK3brRktYKapQ2ylb8i7+Djj3gPOHICz7EqE aOjSkxYSbKr8B7BHQpbyDs145InOdD4EhEj9vHzrENeo+ZCh6AxXvItyeOFUk4/jVT+KREX00I2E Uck7jBQ+zIPHEIA1FQE= )`
	RRSIG=22896 and DNSKEY=22896 verifies the A RRset

regulations.gov

	Query to pydns2.epa.gov for regulations.gov/A
	Received 235 bytes from 161.80.212.12
	;; Response received from 161.80.212.12 (235 octets) ;; HEADER SECTION ;; id = 42879 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN A ;; ANSWER SECTION (2 records) regulations.gov. 600 IN A 134.67.98.71 regulations.gov. 600 IN RRSIG ( A 8 2 600 20211107230621 20211008224555 22896 regulations.gov. P/k22DAruKwxJxUZ2h2pj6zpYvKCiNpFqJO3/kzeHbfn+c//xI2/Qd1r+pcpAKtp+5P85z66qpFA GIRzFeCsUB4lLqa49rjZnqUlP9XXtAFlt/yZxI2ssAa+aA1EkFwoET+GKnntAG0QS05NUe1GyX1H 6GbqV96xTBHqVlB+49s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	pydns2.epa.gov is authoritative for regulations.gov
	Found RRSIG signed by regulations.gov zone
	Query to pydns2.epa.gov for regulations.gov/A
	Received 235 bytes from 161.80.212.12
	;; Response received from 161.80.212.12 (235 octets) ;; HEADER SECTION ;; id = 34163 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN A ;; ANSWER SECTION (2 records) regulations.gov. 600 IN A 134.67.98.71 regulations.gov. 600 IN RRSIG ( A 8 2 600 20211107230621 20211008224555 22896 regulations.gov. P/k22DAruKwxJxUZ2h2pj6zpYvKCiNpFqJO3/kzeHbfn+c//xI2/Qd1r+pcpAKtp+5P85z66qpFA GIRzFeCsUB4lLqa49rjZnqUlP9XXtAFlt/yZxI2ssAa+aA1EkFwoET+GKnntAG0QS05NUe1GyX1H 6GbqV96xTBHqVlB+49s= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	regulations.gov A RR has value 134.67.98.71
	Found 1 RRSIGs over A RRset
	`regulations.gov. 600 IN RRSIG ( A 8 2 600 20211107230621 20211008224555 22896 regulations.gov. P/k22DAruKwxJxUZ2h2pj6zpYvKCiNpFqJO3/kzeHbfn+c//xI2/Qd1r+pcpAKtp+5P85z66qpFA GIRzFeCsUB4lLqa49rjZnqUlP9XXtAFlt/yZxI2ssAa+aA1EkFwoET+GKnntAG0QS05NUe1GyX1H 6GbqV96xTBHqVlB+49s= )`
	RRSIG=22896 and DNSKEY=22896 verifies the A RRset

regulations.gov

	Query to rtpns2.epa.gov for regulations.gov/A
	Received 235 bytes from 134.67.12.12
	;; Response received from 134.67.12.12 (235 octets) ;; HEADER SECTION ;; id = 11128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN A ;; ANSWER SECTION (2 records) regulations.gov. 600 IN A 134.67.98.71 regulations.gov. 600 IN RRSIG ( A 8 2 600 20211107233315 20211008224555 22896 regulations.gov. GseTaUF8NFhVNxu0xPEq/mMsZHpJNbl+WXj6cnyrKu92DCQhaKFnK6S8JqLZUWYGcTtOi0EkXu2S ip9KUCbiokCjiF81ZEstebU1RSXd53mwDrZ1eCcWRav5dlwfOjRn87aPv6QUgx5K/Kw9sgzg8fph Fx1X4F9CVWCHFVu/p7k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rtpns2.epa.gov is authoritative for regulations.gov
	Found RRSIG signed by regulations.gov zone
	Query to rtpns2.epa.gov for regulations.gov/A
	Received 235 bytes from 134.67.12.12
	;; Response received from 134.67.12.12 (235 octets) ;; HEADER SECTION ;; id = 61232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN A ;; ANSWER SECTION (2 records) regulations.gov. 600 IN A 134.67.98.71 regulations.gov. 600 IN RRSIG ( A 8 2 600 20211107233315 20211008224555 22896 regulations.gov. GseTaUF8NFhVNxu0xPEq/mMsZHpJNbl+WXj6cnyrKu92DCQhaKFnK6S8JqLZUWYGcTtOi0EkXu2S ip9KUCbiokCjiF81ZEstebU1RSXd53mwDrZ1eCcWRav5dlwfOjRn87aPv6QUgx5K/Kw9sgzg8fph Fx1X4F9CVWCHFVu/p7k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	regulations.gov A RR has value 134.67.98.71
	Found 1 RRSIGs over A RRset
	`regulations.gov. 600 IN RRSIG ( A 8 2 600 20211107233315 20211008224555 22896 regulations.gov. GseTaUF8NFhVNxu0xPEq/mMsZHpJNbl+WXj6cnyrKu92DCQhaKFnK6S8JqLZUWYGcTtOi0EkXu2S ip9KUCbiokCjiF81ZEstebU1RSXd53mwDrZ1eCcWRav5dlwfOjRn87aPv6QUgx5K/Kw9sgzg8fph Fx1X4F9CVWCHFVu/p7k= )`
	RRSIG=22896 and DNSKEY=22896 verifies the A RRset

regulations.gov

	Query to rtpns1.epa.gov for regulations.gov/A
	Received 235 bytes from 134.67.12.10
	;; Response received from 134.67.12.10 (235 octets) ;; HEADER SECTION ;; id = 44816 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN A ;; ANSWER SECTION (2 records) regulations.gov. 600 IN A 134.67.98.71 regulations.gov. 600 IN RRSIG ( A 8 2 600 20211107232615 20211008224555 22896 regulations.gov. plxMyRddrcAvI2Ll/oqA9yGR01PYGNWt62hY3seF66fkD+ocAxoCfnV4Syq77i7q12nD8LJFRb2v b1FlYY+InQQkgRehYV5GBpm8A6xawf9MA3d0VIVE8TWJggy5uCGzB/MI02O9lXAeHLraT3yb+OLj WMCBCmIFS4clJdnZBqs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rtpns1.epa.gov is authoritative for regulations.gov
	Found RRSIG signed by regulations.gov zone
	Query to rtpns1.epa.gov for regulations.gov/A
	Received 235 bytes from 134.67.12.10
	;; Response received from 134.67.12.10 (235 octets) ;; HEADER SECTION ;; id = 10328 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; regulations.gov. IN A ;; ANSWER SECTION (2 records) regulations.gov. 600 IN A 134.67.98.71 regulations.gov. 600 IN RRSIG ( A 8 2 600 20211107232615 20211008224555 22896 regulations.gov. plxMyRddrcAvI2Ll/oqA9yGR01PYGNWt62hY3seF66fkD+ocAxoCfnV4Syq77i7q12nD8LJFRb2v b1FlYY+InQQkgRehYV5GBpm8A6xawf9MA3d0VIVE8TWJggy5uCGzB/MI02O9lXAeHLraT3yb+OLj WMCBCmIFS4clJdnZBqs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	regulations.gov A RR has value 134.67.98.71
	Found 1 RRSIGs over A RRset
	`regulations.gov. 600 IN RRSIG ( A 8 2 600 20211107232615 20211008224555 22896 regulations.gov. plxMyRddrcAvI2Ll/oqA9yGR01PYGNWt62hY3seF66fkD+ocAxoCfnV4Syq77i7q12nD8LJFRb2v b1FlYY+InQQkgRehYV5GBpm8A6xawf9MA3d0VIVE8TWJggy5uCGzB/MI02O9lXAeHLraT3yb+OLj WMCBCmIFS4clJdnZBqs= )`
	RRSIG=22896 and DNSKEY=22896 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test regulations.gov at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: