DNSSEC Analyzer - cyberthreat.id

Domain Name:

Time: 2020-04-07 12:14:08 UTC, NTP stratum 4

Analyzing DNSSEC problems for cyberthreat.id

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (1139 bytes) ;; HEADER SECTION ;; id = 40073 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	DNSKEY=48903 is now in the chain-of-trust
	Query to d.root-servers.net for cyberthreat.id/A
	Received 729 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (729 bytes) ;; HEADER SECTION ;; id = 47164 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20200420050000 20200407040000 48903 . b3uGHDMiexOIE9wiTXxDnwmmKboyP5hgGE9K4rTJLL6plvWVhaq4sXU58/c/ZR9q7ElWg1RJ9b0K fA2/8A0hXN/tpQ9JVjuXIv8GkvCMOnIRa85YeRn97W6d5140LZcQcl5QTsQ8RGEaZrkxGBBqMAUd /JBCltBfyYgx4W9q4qYDIpzGX7MpIsnBmSTubFWQ7GVjptuKQ4J7fCz2pYD8Jry6e1VKqT3Z1sXJ GZijO+qDjtZBYiNVnHCvzkwpS84M7Ql71h0Vnx7j1JVykjsAUJ893/1HOcYHprXEZQnCjn5bABEr 9JrXzZv26a5sBoDvkToV3QrJL8Yz3nUmjC1EhQ== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to h.root-servers.net for id/DNSKEY
	Received 717 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (717 bytes) ;; HEADER SECTION ;; id = 12549 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) id. 172800 IN NS b.dns.id. id. 172800 IN NS c.dns.id. id. 172800 IN NS d.dns.id. id. 172800 IN NS e.dns.id. id. 172800 IN NS ns4.apnic.net. id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN RRSIG ( DS 8 1 86400 20200420050000 20200407040000 48903 . b3uGHDMiexOIE9wiTXxDnwmmKboyP5hgGE9K4rTJLL6plvWVhaq4sXU58/c/ZR9q7ElWg1RJ9b0K fA2/8A0hXN/tpQ9JVjuXIv8GkvCMOnIRa85YeRn97W6d5140LZcQcl5QTsQ8RGEaZrkxGBBqMAUd /JBCltBfyYgx4W9q4qYDIpzGX7MpIsnBmSTubFWQ7GVjptuKQ4J7fCz2pYD8Jry6e1VKqT3Z1sXJ GZijO+qDjtZBYiNVnHCvzkwpS84M7Ql71h0Vnx7j1JVykjsAUJ893/1HOcYHprXEZQnCjn5bABEr 9JrXzZv26a5sBoDvkToV3QrJL8Yz3nUmjC1EhQ== ) ;; ADDITIONAL SECTION (11 records) b.dns.id. 172800 IN A 103.19.179.179 c.dns.id. 172800 IN A 103.19.178.178 d.dns.id. 172800 IN A 45.126.57.57 e.dns.id. 172800 IN A 103.19.177.177 ns4.apnic.net. 172800 IN A 202.12.31.53 b.dns.id. 172800 IN AAAA 2402:ee80:b::b c.dns.id. 172800 IN AAAA 2402:ee80:c::c d.dns.id. 172800 IN AAAA 2402:ee80:d::d e.dns.id. 172800 IN AAAA 2001:df5:4000:4::4 ns4.apnic.net. 172800 IN AAAA 2001:dd8:12::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone id

	Checking DS between . and id
	Query to c.root-servers.net for id/DS
	Received 402 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (402 bytes) ;; HEADER SECTION ;; id = 30355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DS ;; ANSWER SECTION (3 records) id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea ) id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c id. 86400 IN RRSIG ( DS 8 1 86400 20200420050000 20200407040000 48903 . b3uGHDMiexOIE9wiTXxDnwmmKboyP5hgGE9K4rTJLL6plvWVhaq4sXU58/c/ZR9q7ElWg1RJ9b0K fA2/8A0hXN/tpQ9JVjuXIv8GkvCMOnIRa85YeRn97W6d5140LZcQcl5QTsQ8RGEaZrkxGBBqMAUd /JBCltBfyYgx4W9q4qYDIpzGX7MpIsnBmSTubFWQ7GVjptuKQ4J7fCz2pYD8Jry6e1VKqT3Z1sXJ GZijO+qDjtZBYiNVnHCvzkwpS84M7Ql71h0Vnx7j1JVykjsAUJ893/1HOcYHprXEZQnCjn5bABEr 9JrXzZv26a5sBoDvkToV3QrJL8Yz3nUmjC1EhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for id in the . zone
	DS=26887/SHA-256 has algorithm RSASHA256
	DS=26887/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`id. 86400 IN RRSIG ( DS 8 1 86400 20200420050000 20200407040000 48903 . b3uGHDMiexOIE9wiTXxDnwmmKboyP5hgGE9K4rTJLL6plvWVhaq4sXU58/c/ZR9q7ElWg1RJ9b0K fA2/8A0hXN/tpQ9JVjuXIv8GkvCMOnIRa85YeRn97W6d5140LZcQcl5QTsQ8RGEaZrkxGBBqMAUd /JBCltBfyYgx4W9q4qYDIpzGX7MpIsnBmSTubFWQ7GVjptuKQ4J7fCz2pYD8Jry6e1VKqT3Z1sXJ GZijO+qDjtZBYiNVnHCvzkwpS84M7Ql71h0Vnx7j1JVykjsAUJ893/1HOcYHprXEZQnCjn5bABEr 9JrXzZv26a5sBoDvkToV3QrJL8Yz3nUmjC1EhQ== )`
	RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
	DS=26887/SHA-256 is now in the chain-of-trust
	`id. 86400 IN DS ( 26887 8 2 28be22003a1afb1ed9a7bb82482274e2db5f09a6c50702c731e040d2257347ea )`
	`id. 86400 IN DS 26887 8 1 2f1e41b5bf7da7f134b4025e8242d3a9ef54801c`
	Query to ns4.apnic.net for id/DNSKEY
	Received 1163 bytes from 202.12.31.53
	;; Answer received from 202.12.31.53 (1163 bytes) ;; HEADER SECTION ;; id = 16487 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id. IN DNSKEY ;; ANSWER SECTION (4 records) id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887 id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449 id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200415163546 20200316161730 22449 id. AlSRJpxOcMfiaB024izgNY5UpWwvVo12pfyr+Py1nnqw2eYSX1zudEuc2du8MyQnUbPUxSRANJAj LOv+4eW+Ybx62egnsiqaYmHg6vxL9uxFXFDN8l4DRAscbntkLqJ88xMu3rl+AWC/uWIPqiZ6p5eu pyAgTMrQOun40c3A8vGYE7SAU6w2l/GoUJEv18ljlW7OHSxUdVR4ryg7FPRmbmuAogZwDUvFg6tu gyuD0CT9pfUS+3AZDiC5VwiAK61qIgPAd6sWzixUFyjQ4OHY5HV+1jtW8NRzgLEtmmI6CGTERmVR qf0fFdPwNijQttgVQjET1cdURwFq5XWZphRDIg== ) id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200415163546 20200316161730 26887 id. OP/5g+uI3NTKUQv2X51du7sMmK2SeQUwgbKeSIIueUzO2ocd2RJaWHP8k+nxGYVZUwee8VvzE+FF HLk7hHl3IVNGl4WUY3juy6y//JMcx/DzqfDZMjZqhUE5mp6rkQF/gdP3XQISDvgdMZbtSwezsX/K m+2xJblk+evyTftonVZxGo4TuzL0tFx6BpQmcbWv8X5io4yboIQJIcjGE/NriMWRIdMJvpjq/hbt QRvg6P8tngAaM/LUHIC3cteOQ95t0tmjgrsCEdj15koJ0GgI5YGphSg1Q2pFvCX/kg4MBBVOFw+k ME/LBnGIS0zxZiJCoTxr9uW1hYyAxKyU/jAvhA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for id
	`id. 86400 IN DNSKEY ( 257 3 8 AwEAAcTe9z3F7RaSKwc6BUrfOAZTKl2uV+VfcYu3+/L5n2AmmqRnep4tUvLLp6awc0/G0sqADalq iLwossfpihHwyXzpD7/DwkUNKtJpbfafeKKqoO7PK10T/tnEyjC6TQLenZIpzVEQIH9Qd0OGr6xb C+whZBfLWwKl8QpdrqcQ6gpH5KpRvvSmo6hJ50SEOqTbJLOtvA4MtBP8k1yKSXDbXTGMniW/wRZf C3bMJGtK2xMY2wPOXsYM9u+MOWaqdhOKdxzG0je9ztz+F97LJa5dke48KcNmHicwDnIHtLm+8Xnm qn/MAPJHnB1NWMWXiMZR8ugrFoPXSkw5IoemtNMjxeM= ) ; Key ID = 26887`
	`id. 86400 IN DNSKEY ( 256 3 8 AwEAAckf2f45NrA7QrZhdbbrBV1ku04QvQWGBqF3gPQ1fe473tV8OVztNzshC4sai1hQDVQ0b5Q1 AWb3u6I6MEtDIvWA2EJU69IRAFj3FcuJoEbMXCKk9xeusPrgnAyu8zOn7Ur2krJ0AVn6nBNjsINA O8UMEC3nT1Loot0GW0Wo98L8gAYwfUofHXCsUlAeOM2m7j2zKu5sVWH+H+/7H4+dEDMDaUj0exqx FVxhsMVsmgqtslmdS7wPWUa5ZB6fm9dybE8aZlSwyeyIRyso6khHRFX7csxbECjfrmUJ9YKMH9td 5/gHVT+HQNQeIJ1khIS21SvWt/GHqcGqDxvS/fTQuRU= ) ; Key ID = 22449`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA-256 verifies DNSKEY=26887/SEP
	DS=26887/SHA-1 verifies DNSKEY=26887/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200415163546 20200316161730 22449 id. AlSRJpxOcMfiaB024izgNY5UpWwvVo12pfyr+Py1nnqw2eYSX1zudEuc2du8MyQnUbPUxSRANJAj LOv+4eW+Ybx62egnsiqaYmHg6vxL9uxFXFDN8l4DRAscbntkLqJ88xMu3rl+AWC/uWIPqiZ6p5eu pyAgTMrQOun40c3A8vGYE7SAU6w2l/GoUJEv18ljlW7OHSxUdVR4ryg7FPRmbmuAogZwDUvFg6tu gyuD0CT9pfUS+3AZDiC5VwiAK61qIgPAd6sWzixUFyjQ4OHY5HV+1jtW8NRzgLEtmmI6CGTERmVR qf0fFdPwNijQttgVQjET1cdURwFq5XWZphRDIg== )`
	`id. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200415163546 20200316161730 26887 id. OP/5g+uI3NTKUQv2X51du7sMmK2SeQUwgbKeSIIueUzO2ocd2RJaWHP8k+nxGYVZUwee8VvzE+FF HLk7hHl3IVNGl4WUY3juy6y//JMcx/DzqfDZMjZqhUE5mp6rkQF/gdP3XQISDvgdMZbtSwezsX/K m+2xJblk+evyTftonVZxGo4TuzL0tFx6BpQmcbWv8X5io4yboIQJIcjGE/NriMWRIdMJvpjq/hbt QRvg6P8tngAaM/LUHIC3cteOQ95t0tmjgrsCEdj15koJ0GgI5YGphSg1Q2pFvCX/kg4MBBVOFw+k ME/LBnGIS0zxZiJCoTxr9uW1hYyAxKyU/jAvhA== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DNSKEY RRset
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=22449 is now in the chain-of-trust
	Query to ns4.apnic.net for cyberthreat.id/A
	Received 518 bytes from 202.12.31.53
	;; Answer received from 202.12.31.53 (518 bytes) ;; HEADER SECTION ;; id = 41286 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberthreat.id. 3600 IN NS nx2.ruangsiber.id. cyberthreat.id. 3600 IN NS nx1.ruangsiber.id. cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf ) cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20200507103312 20200407093312 22449 id. rfn2gmnaG+fiQ0Wj0k9WiA+EmCPRhRSU+atiM1jVi3GumEsHIGZFQ6+jBB3gOywAFOkmM5APm0kO klf1VxXCBwEaK+5VLeNoZ2LGKukR7KR9ZvrPNwWD3hKfuliFlUMixWhpLwFP6CaGVOOY/srUFUv3 xzAhdo8wR47iSkPKU5Hd85lJthBgn2Sme4XRMY6lO943YDbRTANYumo5/JRxOz3jYJ1LP+HhigKj CksN474UN3hK7M+8uXEe2Co23wijidN2U9Ao2Sq/Pf2WoTclPQ3h5QTXJUqdhJfiP0E80sZ+Vh/V uEUiia9tS0WGuXUbI14zbuGfrKTeob7GiH8fMw== ) ;; ADDITIONAL SECTION (5 records) nx2.ruangsiber.id. 3600 IN A 103.149.180.2 nx1.ruangsiber.id. 3600 IN A 103.149.180.1 nx2.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::2 nx1.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.dns.id for cyberthreat.id/DNSKEY
	Received 516 bytes from 103.19.179.179
	;; Answer received from 103.19.179.179 (516 bytes) ;; HEADER SECTION ;; id = 14575 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberthreat.id. 3600 IN NS nx1.ruangsiber.id. cyberthreat.id. 3600 IN NS nx2.ruangsiber.id. cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf ) cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20200507103312 20200407093312 22449 id. rfn2gmnaG+fiQ0Wj0k9WiA+EmCPRhRSU+atiM1jVi3GumEsHIGZFQ6+jBB3gOywAFOkmM5APm0kO klf1VxXCBwEaK+5VLeNoZ2LGKukR7KR9ZvrPNwWD3hKfuliFlUMixWhpLwFP6CaGVOOY/srUFUv3 xzAhdo8wR47iSkPKU5Hd85lJthBgn2Sme4XRMY6lO943YDbRTANYumo5/JRxOz3jYJ1LP+HhigKj CksN474UN3hK7M+8uXEe2Co23wijidN2U9Ao2Sq/Pf2WoTclPQ3h5QTXJUqdhJfiP0E80sZ+Vh/V uEUiia9tS0WGuXUbI14zbuGfrKTeob7GiH8fMw== ) ;; ADDITIONAL SECTION (5 records) nx1.ruangsiber.id. 3600 IN A 103.149.180.1 nx2.ruangsiber.id. 3600 IN A 103.149.180.2 nx1.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::1 nx2.ruangsiber.id. 3600 IN AAAA 2001:df3:3580:d42::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cyberthreat.id

cyberthreat.id

	Checking DS between id and cyberthreat.id
	Query to d.dns.id for cyberthreat.id/DS
	Received 381 bytes from 45.126.57.57
	;; Answer received from 45.126.57.57 (381 bytes) ;; HEADER SECTION ;; id = 24170 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DS ;; ANSWER SECTION (2 records) cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf ) cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20200507103312 20200407093312 22449 id. rfn2gmnaG+fiQ0Wj0k9WiA+EmCPRhRSU+atiM1jVi3GumEsHIGZFQ6+jBB3gOywAFOkmM5APm0kO klf1VxXCBwEaK+5VLeNoZ2LGKukR7KR9ZvrPNwWD3hKfuliFlUMixWhpLwFP6CaGVOOY/srUFUv3 xzAhdo8wR47iSkPKU5Hd85lJthBgn2Sme4XRMY6lO943YDbRTANYumo5/JRxOz3jYJ1LP+HhigKj CksN474UN3hK7M+8uXEe2Co23wijidN2U9Ao2Sq/Pf2WoTclPQ3h5QTXJUqdhJfiP0E80sZ+Vh/V uEUiia9tS0WGuXUbI14zbuGfrKTeob7GiH8fMw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cyberthreat.id in the id zone
	DS=24997/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cyberthreat.id. 3600 IN RRSIG ( DS 8 2 3600 20200507103312 20200407093312 22449 id. rfn2gmnaG+fiQ0Wj0k9WiA+EmCPRhRSU+atiM1jVi3GumEsHIGZFQ6+jBB3gOywAFOkmM5APm0kO klf1VxXCBwEaK+5VLeNoZ2LGKukR7KR9ZvrPNwWD3hKfuliFlUMixWhpLwFP6CaGVOOY/srUFUv3 xzAhdo8wR47iSkPKU5Hd85lJthBgn2Sme4XRMY6lO943YDbRTANYumo5/JRxOz3jYJ1LP+HhigKj CksN474UN3hK7M+8uXEe2Co23wijidN2U9Ao2Sq/Pf2WoTclPQ3h5QTXJUqdhJfiP0E80sZ+Vh/V uEUiia9tS0WGuXUbI14zbuGfrKTeob7GiH8fMw== )`
	RRSIG=22449 and DNSKEY=22449 verifies the DS RRset
	DS=24997/SHA-256 is now in the chain-of-trust
	`cyberthreat.id. 3600 IN DS ( 24997 8 2 612232995827e6bbd19db170e67349635749b3e15ce2ea1ac8c73a681864f7cf )`
	Query to nx2.ruangsiber.id for cyberthreat.id/DNSKEY
	Received 769 bytes from 103.149.180.2
	;; Answer received from 103.149.180.2 (769 bytes) ;; HEADER SECTION ;; id = 26859 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN DNSKEY ;; ANSWER SECTION (3 records) cyberthreat.id. 86400 IN DNSKEY ( 256 3 8 AwEAAb9zVCOmbH7lHpTRFYmApHRO7jLs2XWfBaLh7f5Wh4bYjZqdFTYv9SUbC0Mi9KbsIgSDLrhn 5cg+UWeiYJLCYYmOIPeoxWyN8afnmz3YcL7g+EKm1Y4qgBNsLxJh+olJ+DLVz9v4E7DOFmRQs5sj we0YmaYpdjZgGB8K7h8z4+xr ) ; Key ID = 64743 cyberthreat.id. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200416000000 20200326000000 24997 cyberthreat.id. d9KPmYBsorxnO0g14MpiCwoQara3WJXbD2DEfVD6qssGrKugeuH6K/6dkYbltr7a/V0RVbF4yenW x49bqv/ZP7zzRdCnEYlKX+FtNUTy+ClHWISFSnyQPUc0kkWtg1WMjcBuLp+Z4Peain8Zu6Sg1J6S XngZuIl9QBu82d0XZUVQ4qzUteSZMUpJuqwKnL9Y78BAgI6aOq9yMvdduhzdWoUF51rbCwK+0hAL Xb9bgcewcPeDPkO1w5mDMjKX/+YIhmwQSh9XsAjiwHodVlXmRHyFuqKdhPlKDMpPUJ6MEfsuj4HC KgPuLml4idE9TdwzWYVTI/l1iyyseA48JpmQAQ== ) cyberthreat.id. 86400 IN DNSKEY ( 257 3 8 AwEAAes75iWSeDcRiX3eiB1qYM6ECEh7I+wnYDOSosX0OpB6GHXKPHFdd6SD4eBqYc4+9DUsxx+F 15pvRqAhZ11NRXZIhG5llWZjgkPkROtiuYv/enFOI7ubkRlGtltnJqKYsLD/VDfoYUZYb5jO4yTs U5V7dB3/P8AJk/V8pj7VDJwAkrPJhsPl6CwaIDotQJSAypasu83wsB2k3znoqpapM1QASm3S41EQ T95OES52t92ZUkD+2pV6U+WgD5fqVZNoR8PzgPs8RhSVJgEq/v6zx+Iq3OqtEbC7Un3e0tjQTlSG 2DYRNoIGea6cT+2Od6ECFP9tl3LaIdHthkQxoOuFOss= ) ; Key ID = 24997 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for cyberthreat.id
	`cyberthreat.id. 86400 IN DNSKEY ( 256 3 8 AwEAAb9zVCOmbH7lHpTRFYmApHRO7jLs2XWfBaLh7f5Wh4bYjZqdFTYv9SUbC0Mi9KbsIgSDLrhn 5cg+UWeiYJLCYYmOIPeoxWyN8afnmz3YcL7g+EKm1Y4qgBNsLxJh+olJ+DLVz9v4E7DOFmRQs5sj we0YmaYpdjZgGB8K7h8z4+xr ) ; Key ID = 64743`
	`cyberthreat.id. 86400 IN DNSKEY ( 257 3 8 AwEAAes75iWSeDcRiX3eiB1qYM6ECEh7I+wnYDOSosX0OpB6GHXKPHFdd6SD4eBqYc4+9DUsxx+F 15pvRqAhZ11NRXZIhG5llWZjgkPkROtiuYv/enFOI7ubkRlGtltnJqKYsLD/VDfoYUZYb5jO4yTs U5V7dB3/P8AJk/V8pj7VDJwAkrPJhsPl6CwaIDotQJSAypasu83wsB2k3znoqpapM1QASm3S41EQ T95OES52t92ZUkD+2pV6U+WgD5fqVZNoR8PzgPs8RhSVJgEq/v6zx+Iq3OqtEbC7Un3e0tjQTlSG 2DYRNoIGea6cT+2Od6ECFP9tl3LaIdHthkQxoOuFOss= ) ; Key ID = 24997`
	DNSKEY=24997/SEP is now in the chain-of-trust
	DS=24997/SHA-256 verifies DNSKEY=24997/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cyberthreat.id. 86400 IN RRSIG ( DNSKEY 8 2 86400 20200416000000 20200326000000 24997 cyberthreat.id. d9KPmYBsorxnO0g14MpiCwoQara3WJXbD2DEfVD6qssGrKugeuH6K/6dkYbltr7a/V0RVbF4yenW x49bqv/ZP7zzRdCnEYlKX+FtNUTy+ClHWISFSnyQPUc0kkWtg1WMjcBuLp+Z4Peain8Zu6Sg1J6S XngZuIl9QBu82d0XZUVQ4qzUteSZMUpJuqwKnL9Y78BAgI6aOq9yMvdduhzdWoUF51rbCwK+0hAL Xb9bgcewcPeDPkO1w5mDMjKX/+YIhmwQSh9XsAjiwHodVlXmRHyFuqKdhPlKDMpPUJ6MEfsuj4HC KgPuLml4idE9TdwzWYVTI/l1iyyseA48JpmQAQ== )`
	RRSIG=24997 and DNSKEY=24997/SEP verifies the DNSKEY RRset
	DNSKEY=64743 is now in the chain-of-trust
	Query to nx2.ruangsiber.id for cyberthreat.id/A
	Received 233 bytes from 103.149.180.2
	;; Answer received from 103.149.180.2 (233 bytes) ;; HEADER SECTION ;; id = 58528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (2 records) cyberthreat.id. 14400 IN RRSIG ( A 8 2 14400 20200416000000 20200326000000 64743 cyberthreat.id. duHWiPH4rQXo/Z3oQ5l3yMSlwbGHkIWDkX80DkI8vU1BcSw1BgKL0UgRHcyqxpp8IFiGzyLX4tRV blo4wKqEmigzDY/YQCXACOOFym8o6qDRfclksAngYUXfwCv/leZZb+BD4BPshmj6vxx3zD2AbuTL hIhxG70J6UgfW5sKf6U= ) cyberthreat.id. 14400 IN A 103.149.180.250 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	cyberthreat.id is authoritative for cyberthreat.id
	Found RRSIG signed by cyberthreat.id zone
	Query to nx1.ruangsiber.id for cyberthreat.id/SOA
	Received 275 bytes from 103.149.180.1
	;; Answer received from 103.149.180.1 (275 bytes) ;; HEADER SECTION ;; id = 45184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN SOA ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN RRSIG ( SOA 8 2 86400 20200416000000 20200326000000 64743 cyberthreat.id. Wlsy08pgJu2pJOY/A3MiE0yIDeO0SuzNwc9g0sb0J7aGkLAoI0Ceu2bKKOvn74RaUO6Wshqu6GrW MDhkAd24sWXN6+3/WUrQTvjkVZHck44Qw6c5MGk2HQJqd/0SVUIzre7msGiVMHLtBcjpI04eHhWK nG6uP6GxHtmWSZvkdoU= ) cyberthreat.id. 86400 IN SOA ( nx1.ruangsiber.id. teknis.ruangsiber.id. 2020040720 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to nx2.ruangsiber.id for cyberthreat.id/SOA
	Received 275 bytes from 103.149.180.2
	;; Answer received from 103.149.180.2 (275 bytes) ;; HEADER SECTION ;; id = 14351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN SOA ;; ANSWER SECTION (2 records) cyberthreat.id. 86400 IN SOA ( nx1.ruangsiber.id. teknis.ruangsiber.id. 2020040720 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) cyberthreat.id. 86400 IN RRSIG ( SOA 8 2 86400 20200416000000 20200326000000 64743 cyberthreat.id. Wlsy08pgJu2pJOY/A3MiE0yIDeO0SuzNwc9g0sb0J7aGkLAoI0Ceu2bKKOvn74RaUO6Wshqu6GrW MDhkAd24sWXN6+3/WUrQTvjkVZHck44Qw6c5MGk2HQJqd/0SVUIzre7msGiVMHLtBcjpI04eHhWK nG6uP6GxHtmWSZvkdoU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to nx2.ruangsiber.id for cyberthreat.id/A
	Received 233 bytes from 103.149.180.2
	;; Answer received from 103.149.180.2 (233 bytes) ;; HEADER SECTION ;; id = 43817 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; cyberthreat.id. IN A ;; ANSWER SECTION (2 records) cyberthreat.id. 14400 IN RRSIG ( A 8 2 14400 20200416000000 20200326000000 64743 cyberthreat.id. duHWiPH4rQXo/Z3oQ5l3yMSlwbGHkIWDkX80DkI8vU1BcSw1BgKL0UgRHcyqxpp8IFiGzyLX4tRV blo4wKqEmigzDY/YQCXACOOFym8o6qDRfclksAngYUXfwCv/leZZb+BD4BPshmj6vxx3zD2AbuTL hIhxG70J6UgfW5sKf6U= ) cyberthreat.id. 14400 IN A 103.149.180.250 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	cyberthreat.id A RR has value 103.149.180.250
	Found 1 RRSIGs over A RRset
	`cyberthreat.id. 14400 IN RRSIG ( A 8 2 14400 20200416000000 20200326000000 64743 cyberthreat.id. duHWiPH4rQXo/Z3oQ5l3yMSlwbGHkIWDkX80DkI8vU1BcSw1BgKL0UgRHcyqxpp8IFiGzyLX4tRV blo4wKqEmigzDY/YQCXACOOFym8o6qDRfclksAngYUXfwCv/leZZb+BD4BPshmj6vxx3zD2AbuTL hIhxG70J6UgfW5sKf6U= )`
	RRSIG=64743 and DNSKEY=64743 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cyberthreat.id at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: