DNSSEC Analyzer - cyberthreat.id

Domain Name:

Time: 2020-09-19 14:24:44 UTC, NTP stratum 4

Analyzing DNSSEC problems for cyberthreat.id

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (1139 bytes) ;; HEADER SECTION ;; id = 60047 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	DNSKEY=26116 is now in the chain-of-trust
	Query to m.root-servers.net for cyberthreat.id/A
	Received 729 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (729 bytes) ;; HEADER SECTION ;; id = 37856 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS d.dns.id. id. 172800 IN NS ns4.apnic.net. id. 172800 IN NS e.dns.id. id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN RRSIG ( DS 8 1 86400 20201002050000 20200919040000 46594 . srqUmrTZ6pZkC4nTFndvmwQ3kNKwIrzoQgTfAbnVroCy+MD2FysWr6+OMOfpKbRcY68wOvX1U0mV /rlT9yU5LYxxH4ng4rdcTemFOwyActkfI0G691johA0QNjms5iT8915Dil/vjvP8tO8FDBLtM9E7 mmS7rDzemWimaGvrMHV0HueiRE+BsAVfTwclVI6mudYirUEWVQ41t8ukpaRLl7Smf5RtzZl42Vbz HozTeUeHGcBJCayZjlDB2xqxbauDlVZBXfH8H679G5NRMeE8ChCcg8NU4P5Q2iW35mQKv3d9IERE s6y4M0nIHOUgQwg5jZWaPYAOxhhgO9Nb3wrryg== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for id/DNSKEY
	Received 717 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (717 bytes) ;; HEADER SECTION ;; id = 53295 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20201002050000 20200919040000 46594 . srqUmrTZ6pZkC4nTFndvmwQ3kNKwIrzoQgTfAbnVroCy+MD2FysWr6+OMOfpKbRcY68wOvX1U0mV /rlT9yU5LYxxH4ng4rdcTemFOwyActkfI0G691johA0QNjms5iT8915Dil/vjvP8tO8FDBLtM9E7 mmS7rDzemWimaGvrMHV0HueiRE+BsAVfTwclVI6mudYirUEWVQ41t8ukpaRLl7Smf5RtzZl42Vbz HozTeUeHGcBJCayZjlDB2xqxbauDlVZBXfH8H679G5NRMeE8ChCcg8NU4P5Q2iW35mQKv3d9IERE s6y4M0nIHOUgQwg5jZWaPYAOxhhgO9Nb3wrryg== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone id

	Checking DS between . and id
	Query to h.root-servers.net for id/DS
	Received 402 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (402 bytes) ;; HEADER SECTION ;; id = 56454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (3 records) id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20201002050000 20200919040000 46594 . srqUmrTZ6pZkC4nTFndvmwQ3kNKwIrzoQgTfAbnVroCy+MD2FysWr6+OMOfpKbRcY68wOvX1U0mV /rlT9yU5LYxxH4ng4rdcTemFOwyActkfI0G691johA0QNjms5iT8915Dil/vjvP8tO8FDBLtM9E7 mmS7rDzemWimaGvrMHV0HueiRE+BsAVfTwclVI6mudYirUEWVQ41t8ukpaRLl7Smf5RtzZl42Vbz HozTeUeHGcBJCayZjlDB2xqxbauDlVZBXfH8H679G5NRMeE8ChCcg8NU4P5Q2iW35mQKv3d9IERE s6y4M0nIHOUgQwg5jZWaPYAOxhhgO9Nb3wrryg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for id in the . zone
	DS=26887/SHA-1 has algorithm RSASHA256
	DS=26887/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20201002050000 20200919040000 46594 . srqUmrTZ6pZkC4nTFndvmwQ3kNKwIrzoQgTfAbnVroCy+MD2FysWr6+OMOfpKbRcY68wOvX1U0mV /rlT9yU5LYxxH4ng4rdcTemFOwyActkfI0G691johA0QNjms5iT8915Dil/vjvP8tO8FDBLtM9E7 mmS7rDzemWimaGvrMHV0HueiRE+BsAVfTwclVI6mudYirUEWVQ41t8ukpaRLl7Smf5RtzZl42Vbz HozTeUeHGcBJCayZjlDB2xqxbauDlVZBXfH8H679G5NRMeE8ChCcg8NU4P5Q2iW35mQKv3d9IERE s6y4M0nIHOUgQwg5jZWaPYAOxhhgO9Nb3wrryg== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=26887/SHA-1 is now in the chain-of-trust
	`id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c`
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	Query to b.dns.id for id/DNSKEY
	Received 1163 bytes from 103.19.179.179
	;; Answer received from 103.19.179.179 (1163 bytes) ;; HEADER SECTION ;; id = 56590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (4 records) id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887 id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201012123008 20200912114858 22449 id. Pgg68xSNeItcJZNTXfKndjXdwhdN+oxz7sSzoTxBuCS1MjN1lV3I/SZvw5jt8FbGRdb84qRBuFph S3YvJhd14NgS71kEAqeu14E5XkpCna/Q4xek5s+fu22dlj1SkmS6/BewQNy0cKHLgdPIhDROz0kk NKoGO6Wcy/L5wRI6MeOTnMLXKxU6CyOmp80dXXccRh2IE8wmGr9ZNzcCbnixmVkxVXFtAJ4nU/gc gIoH99HFdGB42PMt8Gu5ZgcctkauVa7SZufnS5a6GYVAHWN8B3/og3p1lzKgDamJvg6e0x6bmNXE SZwQZ0p2mN4SLT5kPXYvm3KSqbq0V4g/z5WQnQ== ) id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201012123008 20200912114858 26887 id. GVRmQs09i+5VkEVf74hd2sj/0bF5BRZmJIeYzDMW1jPWz6861hv7iQK+qf8zfRrtOqn7hotwiABx BvlaifzRYIyV+YjrhYMtlyl6/6dlA+gQRbn5v/hG7kNHwKbQu1GXNWgDuQzpktaZOwSJjq2apvYJ DbEcCrHgHCViLw4Gn514T21HyW58EzDE3iQG6G8O25cVD0EWTJKBcSX6j+EXIlZfiHYgcWXI/6Qw E7q5auG/ABgrvtk+hGwZa+n6mn2s/i2kv2W93uXiRnpojXq5t17V+1O417cjBRhFdSkkFKULgJhu dPwcuUeVsMZPtVQ45L9tUdBKegT0ZXZc0ScjRA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887`
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-1 verifies DNSKEY=26887/SEP
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201012123008 20200912114858 22449 id. Pgg68xSNeItcJZNTXfKndjXdwhdN+oxz7sSzoTxBuCS1MjN1lV3I/SZvw5jt8FbGRdb84qRBuFph S3YvJhd14NgS71kEAqeu14E5XkpCna/Q4xek5s+fu22dlj1SkmS6/BewQNy0cKHLgdPIhDROz0kk NKoGO6Wcy/L5wRI6MeOTnMLXKxU6CyOmp80dXXccRh2IE8wmGr9ZNzcCbnixmVkxVXFtAJ4nU/gc gIoH99HFdGB42PMt8Gu5ZgcctkauVa7SZufnS5a6GYVAHWN8B3/og3p1lzKgDamJvg6e0x6bmNXE SZwQZ0p2mN4SLT5kPXYvm3KSqbq0V4g/z5WQnQ== )`
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201012123008 20200912114858 26887 id. GVRmQs09i+5VkEVf74hd2sj/0bF5BRZmJIeYzDMW1jPWz6861hv7iQK+qf8zfRrtOqn7hotwiABx BvlaifzRYIyV+YjrhYMtlyl6/6dlA+gQRbn5v/hG7kNHwKbQu1GXNWgDuQzpktaZOwSJjq2apvYJ DbEcCrHgHCViLw4Gn514T21HyW58EzDE3iQG6G8O25cVD0EWTJKBcSX6j+EXIlZfiHYgcWXI/6Qw E7q5auG/ABgrvtk+hGwZa+n6mn2s/i2kv2W93uXiRnpojXq5t17V+1O417cjBRhFdSkkFKULgJhu dPwcuUeVsMZPtVQ45L9tUdBKegT0ZXZc0ScjRA== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DNSKEY RRset
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to b.dns.id for cyberthreat.id/A
	Received 516 bytes from 103.19.179.179
	;; Answer received from 103.19.179.179 (516 bytes) ;; HEADER SECTION ;; id = 45967 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberthreat.id. 3600 IN NS nx2.ruangsiber.id. cyberthreat.id. 3600 IN NS nx1.ruangsiber.id. cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf ) cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20201011175303 20200911174235 22449 id. SMCIPup6BHURMsUHZ74ymHl2X4Ln7Yg4zTpJbyO7WYBCriI6gKPqnSChjO5aUXRYv9U/ZvnOKK3S kk0fKgeAp/+8lQm+zSGrvMOCYidOcrigLP3I5rrDQIjERU4FVrLIrWpo76zYv/V91Kt0z1PW6buF qY9qY+5yw9n2GX4i7luGQ9oN4TUWtVKtIe41v1V3dvLTqOOV4JDG9DVBstoAKHnm/IkREpYQW57q 0DeYECBJkOajiuZoCv1/rnYjgI+zsLq7+WEdsdrfDFGTTdCvQ9X0jloKviVl7Zz61Z225sjaCx3e g0/UDs6ALtLhup0ffS+ZrtcMRDucPpexfZMRog== ) ;; ADDITIONAL SECTION (5 records) nx1.ruangsiber.id. 3600 IN A 103.149.180.1 nx2.ruangsiber.id. 3600 IN A 103.149.180.2 nx1.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::1 nx2.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.dns.id for cyberthreat.id/DNSKEY
	Received 516 bytes from 103.19.178.178
	;; Answer received from 103.19.178.178 (516 bytes) ;; HEADER SECTION ;; id = 11202 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberthreat.id. 3600 IN NS nx1.ruangsiber.id. cyberthreat.id. 3600 IN NS nx2.ruangsiber.id. cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf ) cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20201011175303 20200911174235 22449 id. SMCIPup6BHURMsUHZ74ymHl2X4Ln7Yg4zTpJbyO7WYBCriI6gKPqnSChjO5aUXRYv9U/ZvnOKK3S kk0fKgeAp/+8lQm+zSGrvMOCYidOcrigLP3I5rrDQIjERU4FVrLIrWpo76zYv/V91Kt0z1PW6buF qY9qY+5yw9n2GX4i7luGQ9oN4TUWtVKtIe41v1V3dvLTqOOV4JDG9DVBstoAKHnm/IkREpYQW57q 0DeYECBJkOajiuZoCv1/rnYjgI+zsLq7+WEdsdrfDFGTTdCvQ9X0jloKviVl7Zz61Z225sjaCx3e g0/UDs6ALtLhup0ffS+ZrtcMRDucPpexfZMRog== ) ;; ADDITIONAL SECTION (5 records) nx1.ruangsiber.id. 3600 IN A 103.149.180.1 nx1.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::1 nx2.ruangsiber.id. 3600 IN A 103.149.180.2 nx2.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cyberthreat.id

cyberthreat.id

	Checking DS between id and cyberthreat.id
	Query to e.dns.id for cyberthreat.id/DS
	Received 381 bytes from 103.19.177.177
	;; Answer received from 103.19.177.177 (381 bytes) ;; HEADER SECTION ;; id = 3577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DS ;; ANSWER SECTION (2 records) cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf ) cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20201011175303 20200911174235 22449 id. SMCIPup6BHURMsUHZ74ymHl2X4Ln7Yg4zTpJbyO7WYBCriI6gKPqnSChjO5aUXRYv9U/ZvnOKK3S kk0fKgeAp/+8lQm+zSGrvMOCYidOcrigLP3I5rrDQIjERU4FVrLIrWpo76zYv/V91Kt0z1PW6buF qY9qY+5yw9n2GX4i7luGQ9oN4TUWtVKtIe41v1V3dvLTqOOV4JDG9DVBstoAKHnm/IkREpYQW57q 0DeYECBJkOajiuZoCv1/rnYjgI+zsLq7+WEdsdrfDFGTTdCvQ9X0jloKviVl7Zz61Z225sjaCx3e g0/UDs6ALtLhup0ffS+ZrtcMRDucPpexfZMRog== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cyberthreat.id in the id zone
	DS=24997/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20201011175303 20200911174235 22449 id. SMCIPup6BHURMsUHZ74ymHl2X4Ln7Yg4zTpJbyO7WYBCriI6gKPqnSChjO5aUXRYv9U/ZvnOKK3S kk0fKgeAp/+8lQm+zSGrvMOCYidOcrigLP3I5rrDQIjERU4FVrLIrWpo76zYv/V91Kt0z1PW6buF qY9qY+5yw9n2GX4i7luGQ9oN4TUWtVKtIe41v1V3dvLTqOOV4JDG9DVBstoAKHnm/IkREpYQW57q 0DeYECBJkOajiuZoCv1/rnYjgI+zsLq7+WEdsdrfDFGTTdCvQ9X0jloKviVl7Zz61Z225sjaCx3e g0/UDs6ALtLhup0ffS+ZrtcMRDucPpexfZMRog== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DS RRset
	DS=24997/SHA-256 is now in the chain-of-trust
	`cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf )`
	Query to nx2.ruangsiber.id for cyberthreat.id/DNSKEY
	Received 769 bytes from 103.149.180.2
	;; Answer received from 103.149.180.2 (769 bytes) ;; HEADER SECTION ;; id = 20487 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DNSKEY ;; ANSWER SECTION (3 records) cyberthreat.id. 86400 IN DNSKEY ( 257 3 8 AwEAAes75iWSeDcRiX3eiB1qYM6ECEh7I+wnYDOSosX0OpB6GHXKPHFdd6SD4eBqYc4+9DUsxx+F 15pvRqAhZ11NRXZIhG5llWZjgkPkROtiuYv/enFOI7ubkRlGtltnJqKYsLD/VDfoYUZYb5jO4yTs U5V7dB3/P8AJk/V8pj7VDJwAkrPJhsPl6CwaIDotQJSAypasu83wsB2k3znoqpapM1QASm3S41EQ T95OES52t92ZUkD+2pV6U+WgD5fqVZNoR8PzgPs8RhSVJgEq/v6zx+Iq3OqtEbC7Un3e0tjQTlSG 2DYRNoIGea6cT+2Od6ECFP9tl3LaIdHthkQxoOuFOss= ) ; Key ID = 24997 cyberthreat.id. 86400 IN DNSKEY ( 256 3 8 AwEAAb9zVCOmbH7lHpTRFYmApHRO7jLs2XWfBaLh7f5Wh4bYjZqdFTYv9SUbC0Mi9KbsIgSDLrhn 5cg+UWeiYJLCYYmOIPeoxWyN8afnmz3YcL7g+EKm1Y4qgBNsLxJh+olJ+DLVz9v4E7DOFmRQs5sj we0YmaYpdjZgGB8K7h8z4+xr ) ; Key ID = 64743 cyberthreat.id. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201001000000 20200910000000 24997 cyberthreat.id. PWCxJMw9yd80A55qXAmmm5kRpu5E3ls9NEOQNr540All4agHRQTW+fw0P/VVSPTmjLBCBPcijJOj NIDfA4/HZYwyG+uhSsFeWk5gSsQofKh2EvwSa8QCnPJTL6NYz4kbvAHvqFGALqkY6W4rZNltYii0 QkCSTwApoqfP9ZuKu8cCmv1WjLE43Vj37CxE/BScaA7L04Km8Kd2NR0+qG0QG9d4Uou8Y2zdmkeG bHOqOjncDMdd9V11Rx4A0jaK8odzLNMIMSbKTjmCGe0BprF/71UJ0NToXi6iC3NdJA8A/cmT85FN PS2LT1Cb77R4qoqurfjZ5sanbeppPmwK1W5CGQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for cyberthreat.id
	`cyberthreat.id. 86400 IN DNSKEY ( 257 3 8 AwEAAes75iWSeDcRiX3eiB1qYM6ECEh7I+wnYDOSosX0OpB6GHXKPHFdd6SD4eBqYc4+9DUsxx+F 15pvRqAhZ11NRXZIhG5llWZjgkPkROtiuYv/enFOI7ubkRlGtltnJqKYsLD/VDfoYUZYb5jO4yTs U5V7dB3/P8AJk/V8pj7VDJwAkrPJhsPl6CwaIDotQJSAypasu83wsB2k3znoqpapM1QASm3S41EQ T95OES52t92ZUkD+2pV6U+WgD5fqVZNoR8PzgPs8RhSVJgEq/v6zx+Iq3OqtEbC7Un3e0tjQTlSG 2DYRNoIGea6cT+2Od6ECFP9tl3LaIdHthkQxoOuFOss= ) ; Key ID = 24997`
	`cyberthreat.id. 86400 IN DNSKEY ( 256 3 8 AwEAAb9zVCOmbH7lHpTRFYmApHRO7jLs2XWfBaLh7f5Wh4bYjZqdFTYv9SUbC0Mi9KbsIgSDLrhn 5cg+UWeiYJLCYYmOIPeoxWyN8afnmz3YcL7g+EKm1Y4qgBNsLxJh+olJ+DLVz9v4E7DOFmRQs5sj we0YmaYpdjZgGB8K7h8z4+xr ) ; Key ID = 64743`
	DNSKEY=24997/SEP is now in the chain-of-trust
	DS=24997/SHA-256 verifies DNSKEY=24997/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cyberthreat.id. 86400 IN RRSIG ( DNSKEY 8 2 86400 20201001000000 20200910000000 24997 cyberthreat.id. PWCxJMw9yd80A55qXAmmm5kRpu5E3ls9NEOQNr540All4agHRQTW+fw0P/VVSPTmjLBCBPcijJOj NIDfA4/HZYwyG+uhSsFeWk5gSsQofKh2EvwSa8QCnPJTL6NYz4kbvAHvqFGALqkY6W4rZNltYii0 QkCSTwApoqfP9ZuKu8cCmv1WjLE43Vj37CxE/BScaA7L04Km8Kd2NR0+qG0QG9d4Uou8Y2zdmkeG bHOqOjncDMdd9V11Rx4A0jaK8odzLNMIMSbKTjmCGe0BprF/71UJ0NToXi6iC3NdJA8A/cmT85FN PS2LT1Cb77R4qoqurfjZ5sanbeppPmwK1W5CGQ== )`
	RRSIG=24997 and DNSKEY=24997/SEP verifies the DNSKEY RRset
	DNSKEY=64743 is now in the chain-of-trust
	Query to nx1.ruangsiber.id for cyberthreat.id/A
	Received 233 bytes from 103.149.180.1
	;; Answer received from 103.149.180.1 (233 bytes) ;; HEADER SECTION ;; id = 36716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (2 records) cyberthreat.id. 14400 IN RRSIG ( A 8 2 14400 20201001000000 20200910000000 64743 cyberthreat.id. BTqBbD5gRujiaJdKbeGdU1jAd1J+ZIVWPtg9gp0M5GEKubm8fO7nljcbGQMrcwF6ombnQTXI3Zx4 uM5z75V6o/8M6yM4vDbHD9GgbB5hiHRMc7uAMWJX1S1py6ebvRH5NXHBFx1Nwp4E5AYDx4+Qn4xG yPDKmQQ39HH4cgS1A2A= ) cyberthreat.id. 14400 IN A 103.149.180.250 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	cyberthreat.id is authoritative for cyberthreat.id
	Found RRSIG signed by cyberthreat.id zone
	Query to nx1.ruangsiber.id for cyberthreat.id/SOA
	Received 275 bytes from 103.149.180.1
	;; Answer received from 103.149.180.1 (275 bytes) ;; HEADER SECTION ;; id = 2843 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN SOA ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN RRSIG ( SOA 8 2 86400 20201001000000 20200910000000 64743 cyberthreat.id. pGdilrnANFsA1kDinKKxprjEYfz9gZJmx0xHP4gwvzyitLBSDASi9+aL4zpZobcsTKw9R7LkL7k6 ZjvTKgKGYv1XJKfhaElpDj/AQQhg/+PXWZ7ueUBAF9NCqWBvGdOEuKMwr+BpNWOxHvmSL9u3Ix6k TOdNRTv6U1/ci0/bpgI= ) cyberthreat.id. 86400 IN SOA ( nx1.ruangsiber.id. teknis.ruangsiber.id. 2020060901 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to nx2.ruangsiber.id for cyberthreat.id/SOA
	Received 275 bytes from 103.149.180.2
	;; Answer received from 103.149.180.2 (275 bytes) ;; HEADER SECTION ;; id = 36245 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN SOA ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN SOA ( nx1.ruangsiber.id. teknis.ruangsiber.id. 2020060901 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cyberthreat.id. 86400 IN RRSIG ( SOA 8 2 86400 20201001000000 20200910000000 64743 cyberthreat.id. pGdilrnANFsA1kDinKKxprjEYfz9gZJmx0xHP4gwvzyitLBSDASi9+aL4zpZobcsTKw9R7LkL7k6 ZjvTKgKGYv1XJKfhaElpDj/AQQhg/+PXWZ7ueUBAF9NCqWBvGdOEuKMwr+BpNWOxHvmSL9u3Ix6k TOdNRTv6U1/ci0/bpgI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to nx1.ruangsiber.id for cyberthreat.id/A
	Received 233 bytes from 103.149.180.1
	;; Answer received from 103.149.180.1 (233 bytes) ;; HEADER SECTION ;; id = 32960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (2 records) cyberthreat.id. 14400 IN RRSIG ( A 8 2 14400 20201001000000 20200910000000 64743 cyberthreat.id. BTqBbD5gRujiaJdKbeGdU1jAd1J+ZIVWPtg9gp0M5GEKubm8fO7nljcbGQMrcwF6ombnQTXI3Zx4 uM5z75V6o/8M6yM4vDbHD9GgbB5hiHRMc7uAMWJX1S1py6ebvRH5NXHBFx1Nwp4E5AYDx4+Qn4xG yPDKmQQ39HH4cgS1A2A= ) cyberthreat.id. 14400 IN A 103.149.180.250 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	cyberthreat.id A RR has value 103.149.180.250
	Found 1 RRSIGs over A RRset
	`cyberthreat.id. 14400 IN RRSIG ( A 8 2 14400 20201001000000 20200910000000 64743 cyberthreat.id. BTqBbD5gRujiaJdKbeGdU1jAd1J+ZIVWPtg9gp0M5GEKubm8fO7nljcbGQMrcwF6ombnQTXI3Zx4 uM5z75V6o/8M6yM4vDbHD9GgbB5hiHRMc7uAMWJX1S1py6ebvRH5NXHBFx1Nwp4E5AYDx4+Qn4xG yPDKmQQ39HH4cgS1A2A= )`
	RRSIG=64743 and DNSKEY=64743 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cyberthreat.id at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: