DNSSEC Analyzer - ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

Domain Name:

Time: 2021-01-28 06:17:45 UTC, NTP stratum 4

Analyzing DNSSEC problems for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 60154 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210211000000 20210121000000 20326 . hdO/MozPh54eM3Ow9qSXrpqt0L3hj2RfqHeuDimtgMLSR3V16Xqm9k2ctaT4qyCZb51OtiuE+1Uu imx3Dj83myjz5mOGo0z1f1VEwV6QTuPkZeVecZAFCzsuVTlpUT1OdZQhnwvzIIPYBLlG3TOTQuPt UY9v1LcyoxYWEYy+SDdaQo1CGu4Ochy1aleL40pHWaqk0Swl0lLcgykgVWS3ZpCDL+R50cXg7z4i 5GnpMzxy48Yf4ED+Ja/W+x9ZOSmWnRmCjCGrTbY943AgJjCYEBbHEdJYo9PTYJrMp+x75U1LVSVp zpfI7OXd5yvH7AA8b83yyks+Sv+G6w8y05oZNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210211000000 20210121000000 20326 . hdO/MozPh54eM3Ow9qSXrpqt0L3hj2RfqHeuDimtgMLSR3V16Xqm9k2ctaT4qyCZb51OtiuE+1Uu imx3Dj83myjz5mOGo0z1f1VEwV6QTuPkZeVecZAFCzsuVTlpUT1OdZQhnwvzIIPYBLlG3TOTQuPt UY9v1LcyoxYWEYy+SDdaQo1CGu4Ochy1aleL40pHWaqk0Swl0lLcgykgVWS3ZpCDL+R50cXg7z4i 5GnpMzxy48Yf4ED+Ja/W+x9ZOSmWnRmCjCGrTbY943AgJjCYEBbHEdJYo9PTYJrMp+x75U1LVSVp zpfI7OXd5yvH7AA8b83yyks+Sv+G6w8y05oZNw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to d.root-servers.net for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 596 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (596 bytes) ;; HEADER SECTION ;; id = 50142 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20210210050000 20210128040000 42351 . BgsdeJUHknDySjBFeBHtAcESMXKiAPKmFQgmTQcV+kQn3Wb/jOtTEWzeWNZg9v9MRFmseXhNKt7W +66Xa3V6JqznzQ6YcGCkAYshnIiHCOmHniTV56B0o8/+4vsC82dNZA5LapXZoiOqlORTP2RIP4Ez YMZ1tNeHAd+IWNgNOwTR/69Fc0F7IgVrJfSzv3vbHYii8PrbIhaBtLJqJRxhmKji5DFIHPu7rHvS zELnTunOGm1DLuZyg63kUQBN6XhNOtyFjic21xRjp9+UUyxDDRb/4oZiaW0EijOwLkymATP62kCd RD3ckIfEybhshhS21IFekFb2P2KEbyH9VC32iA== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to c.root-servers.net for nl/DNSKEY
	Received 556 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (556 bytes) ;; HEADER SECTION ;; id = 37376 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20210210050000 20210128040000 42351 . BgsdeJUHknDySjBFeBHtAcESMXKiAPKmFQgmTQcV+kQn3Wb/jOtTEWzeWNZg9v9MRFmseXhNKt7W +66Xa3V6JqznzQ6YcGCkAYshnIiHCOmHniTV56B0o8/+4vsC82dNZA5LapXZoiOqlORTP2RIP4Ez YMZ1tNeHAd+IWNgNOwTR/69Fc0F7IgVrJfSzv3vbHYii8PrbIhaBtLJqJRxhmKji5DFIHPu7rHvS zELnTunOGm1DLuZyg63kUQBN6XhNOtyFjic21xRjp9+UUyxDDRb/4oZiaW0EijOwLkymATP62kCd RD3ckIfEybhshhS21IFekFb2P2KEbyH9VC32iA== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to m.root-servers.net for nl/DS
	Received 366 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (366 bytes) ;; HEADER SECTION ;; id = 9572 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20210210050000 20210128040000 42351 . BgsdeJUHknDySjBFeBHtAcESMXKiAPKmFQgmTQcV+kQn3Wb/jOtTEWzeWNZg9v9MRFmseXhNKt7W +66Xa3V6JqznzQ6YcGCkAYshnIiHCOmHniTV56B0o8/+4vsC82dNZA5LapXZoiOqlORTP2RIP4Ez YMZ1tNeHAd+IWNgNOwTR/69Fc0F7IgVrJfSzv3vbHYii8PrbIhaBtLJqJRxhmKji5DFIHPu7rHvS zELnTunOGm1DLuZyg63kUQBN6XhNOtyFjic21xRjp9+UUyxDDRb/4oZiaW0EijOwLkymATP62kCd RD3ckIfEybhshhS21IFekFb2P2KEbyH9VC32iA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20210210050000 20210128040000 42351 . BgsdeJUHknDySjBFeBHtAcESMXKiAPKmFQgmTQcV+kQn3Wb/jOtTEWzeWNZg9v9MRFmseXhNKt7W +66Xa3V6JqznzQ6YcGCkAYshnIiHCOmHniTV56B0o8/+4vsC82dNZA5LapXZoiOqlORTP2RIP4Ez YMZ1tNeHAd+IWNgNOwTR/69Fc0F7IgVrJfSzv3vbHYii8PrbIhaBtLJqJRxhmKji5DFIHPu7rHvS zELnTunOGm1DLuZyg63kUQBN6XhNOtyFjic21xRjp9+UUyxDDRb/4oZiaW0EijOwLkymATP62kCd RD3ckIfEybhshhS21IFekFb2P2KEbyH9VC32iA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns1.dns.nl for nl/DNSKEY
	Received 745 bytes from 194.0.28.53
	;; Answer received from 194.0.28.53 (745 bytes) ;; HEADER SECTION ;; id = 46615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbPjMQUsLF5S4KyUTje6DGFYuoJMVrJwdEytImOabgdSZH8oaGyNTUuKOzpdNvkXr5Je4vCi uQNg7fNBdoOZy3HMqy7qH+ibXrv5UHi7gqmssFg+SiKCIFjk20ZLnU1hXmklt/rivqwUkwxnVlDw O7SNV4use8A8Q3fbmrLt4K4t ) ; Key ID = 4309 nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210204221610 20210122051015 34112 nl. d7Ik8+jUZIOkAd3Jp6pifvkqc8XxyUn6SLtVmTPQUnPYWvetn9nmZVf/tLlAdCfCxkwYGK9ngNdP Ry6zR1HXjJ0efC29Ra2F13TWikaOIOTnj5vrzT4JjnWowRYo2VfY4WfS2RI5SkMzqWSnL0JZwggb fQQbvq8L6daoUaRE42kusPmltp/y5ZqwuETUmf2hZHE2/gq58l7BLzi1Q8YH5Gyqn2KnxIV30ZBZ kmJeQk7Ebg9gS3E21xQaYvU9jj/p3AYVd5dktI1KaX21Kttwnk2Xt+tNmfZkJxSBfLU795qZnXlp noyXFWnMkBI1BIwZb/ARw6kr5+kWToQcOXWhXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbPjMQUsLF5S4KyUTje6DGFYuoJMVrJwdEytImOabgdSZH8oaGyNTUuKOzpdNvkXr5Je4vCi uQNg7fNBdoOZy3HMqy7qH+ibXrv5UHi7gqmssFg+SiKCIFjk20ZLnU1hXmklt/rivqwUkwxnVlDw O7SNV4use8A8Q3fbmrLt4K4t ) ; Key ID = 4309`
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210204221610 20210122051015 34112 nl. d7Ik8+jUZIOkAd3Jp6pifvkqc8XxyUn6SLtVmTPQUnPYWvetn9nmZVf/tLlAdCfCxkwYGK9ngNdP Ry6zR1HXjJ0efC29Ra2F13TWikaOIOTnj5vrzT4JjnWowRYo2VfY4WfS2RI5SkMzqWSnL0JZwggb fQQbvq8L6daoUaRE42kusPmltp/y5ZqwuETUmf2hZHE2/gq58l7BLzi1Q8YH5Gyqn2KnxIV30ZBZ kmJeQk7Ebg9gS3E21xQaYvU9jj/p3AYVd5dktI1KaX21Kttwnk2Xt+tNmfZkJxSBfLU795qZnXlp noyXFWnMkBI1BIwZb/ARw6kr5+kWToQcOXWhXw== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=4309 is now in the chain-of-trust
	Query to ns3.dns.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 410 bytes from 194.0.25.24
	;; Answer received from 194.0.25.24 (410 bytes) ;; HEADER SECTION ;; id = 4813 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20210207031843 20210124131014 4309 nl. LIM3XeSMXFwtRfx+rLieLwyJJm/ngfQHh8Vcrg6uhyTyOc9AHiNY1p8ZwgERCzXcFTvNmJEFWhDl UF557KrPSNxUcDkn74SfiWorPmJOknbtXCE+2/SJUWKK2Xlpsn0ykfw7w1KTPXh6XpYrWUKS/lBu OxY3h1c8CuACgNzNhMw= ) ;; ADDITIONAL SECTION (5 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns2.sidn.nl. 3600 IN A 194.171.17.5 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidn.nl. 3600 IN AAAA 2001:610:0:800d::5 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Query to ns1.dns.nl for sidnlabs.nl/DNSKEY
	Received 381 bytes from 194.0.28.53
	;; Answer received from 194.0.28.53 (381 bytes) ;; HEADER SECTION ;; id = 28421 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20210207031843 20210124131014 4309 nl. LIM3XeSMXFwtRfx+rLieLwyJJm/ngfQHh8Vcrg6uhyTyOc9AHiNY1p8ZwgERCzXcFTvNmJEFWhDl UF557KrPSNxUcDkn74SfiWorPmJOknbtXCE+2/SJUWKK2Xlpsn0ykfw7w1KTPXh6XpYrWUKS/lBu OxY3h1c8CuACgNzNhMw= ) ;; ADDITIONAL SECTION (5 records) ns2.sidn.nl. 3600 IN A 194.171.17.5 ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns2.sidn.nl. 3600 IN AAAA 2001:610:0:800d::5 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns3.dns.nl for sidnlabs.nl/DS
	Received 250 bytes from 194.0.25.24
	;; Answer received from 194.0.25.24 (250 bytes) ;; HEADER SECTION ;; id = 3161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20210207031843 20210124131014 4309 nl. LIM3XeSMXFwtRfx+rLieLwyJJm/ngfQHh8Vcrg6uhyTyOc9AHiNY1p8ZwgERCzXcFTvNmJEFWhDl UF557KrPSNxUcDkn74SfiWorPmJOknbtXCE+2/SJUWKK2Xlpsn0ykfw7w1KTPXh6XpYrWUKS/lBu OxY3h1c8CuACgNzNhMw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=52720/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20210207031843 20210124131014 4309 nl. LIM3XeSMXFwtRfx+rLieLwyJJm/ngfQHh8Vcrg6uhyTyOc9AHiNY1p8ZwgERCzXcFTvNmJEFWhDl UF557KrPSNxUcDkn74SfiWorPmJOknbtXCE+2/SJUWKK2Xlpsn0ykfw7w1KTPXh6XpYrWUKS/lBu OxY3h1c8CuACgNzNhMw= )`
	RRSIG=4309 and DNSKEY=4309 verifies the DS RRset
	DS=52720/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df )`
	Query to ns1.sidnlabs.nl for sidnlabs.nl/DNSKEY
	Received 763 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (763 bytes) ;; HEADER SECTION ;; id = 51137 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853 sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210209113723 20210110104617 52720 sidnlabs.nl. KuPnTYDa39PbH9RKiUnlj3bPgAH/usqI6dLtTsvb2XX3AP7OcIVtb+/GTPT323wwGuU7ab1ocIRR rXmWWY4EvdfSLkQv8L2xOMGxi+Ycc7w5hRqVA8QB9bXANfaeZXEFqwXBUvp699ZRGtMU5zq96qBi yuOm5TUrGrIQTzTG8ZOjvYtzCTVZZ4XxpVahZ7jMhD5qIXhR7BNMWjT2pFzViUfGkrrGtgmZ5SKn eaoZiqzS7FYpezmtCxmtU/Ku761/17+1TXZgN85iaJEfpUEmkmLJFHSwE3vA1naY2q4C4T9EB7JB 91C8a3xFDV2pGbY09vqQYqcCpTc0IK8jL6ko4Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853`
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720`
	DNSKEY=52720/SEP is now in the chain-of-trust
	DS=52720/SHA-256 verifies DNSKEY=52720/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210209113723 20210110104617 52720 sidnlabs.nl. KuPnTYDa39PbH9RKiUnlj3bPgAH/usqI6dLtTsvb2XX3AP7OcIVtb+/GTPT323wwGuU7ab1ocIRR rXmWWY4EvdfSLkQv8L2xOMGxi+Ycc7w5hRqVA8QB9bXANfaeZXEFqwXBUvp699ZRGtMU5zq96qBi yuOm5TUrGrIQTzTG8ZOjvYtzCTVZZ4XxpVahZ7jMhD5qIXhR7BNMWjT2pFzViUfGkrrGtgmZ5SKn eaoZiqzS7FYpezmtCxmtU/Ku761/17+1TXZgN85iaJEfpUEmkmLJFHSwE3vA1naY2q4C4T9EB7JB 91C8a3xFDV2pGbY09vqQYqcCpTc0IK8jL6ko4Q== )`
	RRSIG=52720 and DNSKEY=52720/SEP verifies the DNSKEY RRset
	DNSKEY=20853 is now in the chain-of-trust
	Query to ns2.sidn.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 2322 bytes from 194.171.17.5
	;; Answer received from 194.171.17.5 (2322 bytes) ;; HEADER SECTION ;; id = 42820 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20210215203456 20210116195729 20853 sidnlabs.nl. B7dxN+SU0bVo4smIzkH1TdLKi2vyhTTsJoPpxs0rt7lVMvnqnbLLeuIXilrwBMZVWKPT4g9Ojpyl 3/KkO0WCDRbzu6a4JdvbYf+CICCqbnHaRnsQc5vPJE9N9nvExV+SSF6wJ/u7fy7ClPH1jjh+3uZi nxIhxISgtQdQM3HQf5o= ) ;; ADDITIONAL SECTION (21 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20210215103453 20210116095443 20853 sidnlabs.nl. l1G/hK3KSYe7lhFWOfRTQurZXOwrJvdTuLc7jpA6xzssaeRGXHS4iYJySVSpwGqNgZsFrXintTtY rbPKmwQ0o2S9WYRyPrtHAiGjR1vTWN10bNJSeSzcDveqaEsL7nYkU86ztoJ6HwlC1ksyi+T6LPdt VJArTVMzBWQIQG2rDcc= ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20210215103453 20210116095443 20853 sidnlabs.nl. c51GZiZ/TrhbPxhIB9XFK3+ocNQ4JtNeBxBm0qsPHZJiWDCtUJxPcolHMp8LdgmNuYwcktKKuqdY gnXYVTa8n6DJh89ibICaNGmtTcqE+moqzgFvRnB7JTudbQNOKpDetCeKilZzEPXE/P5mXGVnBIAY 9bD9oydP5e2xIV4tTqI= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20210205022616 20210106020318 20853 sidnlabs.nl. eeOA+xY07pDXr3PaajwDBd7I9BOAdLko6tOIAdbMksfCNvCMKvNtliJ6o9MOFIwk1a24h9xkzfF4 ObpfpIcXAayomOjqnKZF/2aiXXjI0mVqE+UWYXU5wddWAWCuLEju3qir1b3N9hhtA3OWyQvncmd0 DCcPvzyrayXmetBoPbM= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20210205022616 20210106020318 20853 sidnlabs.nl. RIBtVp8NXssnRpcGQuDJBtFDVu6hVX5FUZv/Z33YOFZrm+Ej6l5kAEv4wPp9tKYrrc/JTX30d9qm YU5mQT2D1IgD0mROM3kMuuDwgyVoRajmm6NmyGsjqlgkpbYsod2Zll1umocruJYWSIYdAj4QZvsv kWiMofJ/rjYg1c1GJU8= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20210218192001 20210119184325 20853 sidnlabs.nl. wKF0t5/ysHlzMy4KM3fsBHwG2k8LH+UH3jL1iI7tPuwR1rOieKFmCoYgZ4h+KMuQQtoCtzLi66dR VfWGTxu1sjX46Hlriqwt7KJg+ehn6IsiS6lsmWJliYqE4ETYE/kTdpFazHy02y13d87AhByXO1V4 TKWalXQRw5TuHjvTb3M= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20210218192001 20210119184325 20853 sidnlabs.nl. x0C+ad+id74Oj0g/xwQZ6B1SMh3dlU8MEhG797qRtSbjtit3wq6pvGt1V+k3zUyDn/rXNztSKaPu dJ0OBCUwztqcEtL9qXE5ScZvj2NzwQXEHuJelF8ECfrBZKxJsqn2kFlWp5M8aFDXwgR5eAMDnn21 9zkn7RwqoFmJTrZNj+o= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20210208205817 20210109202828 20853 sidnlabs.nl. NiZUUc1bZbbQE29YvTUKX+HXUuDSFRmFtdYVe+JdGw+XWfNHs1X4DfpVsIlT9oTc3oPJ9bLqrY8E 0PalgmlcunLRS9+SRpEcwSQ5ZBVIPZjkaNaJckEb8fInkAq/JC3afrjT4SPW3I13Med+wUoPRN8R aFaZ/bA7qKGQ7PR72k4= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20210208205817 20210109202828 20853 sidnlabs.nl. XGC/MeRjRRHavLBKvZFdVVMO/b4Bp8XHT1+TqL/FcZW/PeB7Drbx4DBiRGaxKSAsTq6VHqwHzZlI eQYvXnCC37ixjnpN7KSBLe46yZuKvqjfAYJcYYv2q5pl/Y+gOxS86rKGdrbDUBuD1P7rwy8fZt5Q 9GyW49sOS4wgW6U3mC8= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20210217015929 20210118014705 20853 sidnlabs.nl. vGWTUFcn4A9Sr0eFWJKXJImRFOEEg0tDSUTd8EGlXDiyfCoAy8KuloYkudbtpbuJyZKGRsrGcC7P z+0aQU9VdjajAjpOA1ymikVG/gtNKIzKJSL6Jcsx/ElLAUbcKRYXhk4FPk43lcGrmSo3rt+NiuC4 BFhdHFJrUNazKXbykvM= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20210217015929 20210118014705 20853 sidnlabs.nl. jLRM2gnHiLwe1lbiILMi9KuO+otrJE3KG/u5t8qXpW9NiasAOrKPLt79LC2soagAMiyFv/pyQHxI gVYvNCNGLYzYutXKjXWzFsVUZkGcGpQfWHsf/wWxnR0WC9Gbn77I3SQT8MwD4GOE05hPvLieEUio cmOr6vRp4QXJIjU95YQ= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 364 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (364 bytes) ;; HEADER SECTION ;; id = 29470 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20210215203456 20210116195729 20853 sidnlabs.nl. B7dxN+SU0bVo4smIzkH1TdLKi2vyhTTsJoPpxs0rt7lVMvnqnbLLeuIXilrwBMZVWKPT4g9Ojpyl 3/KkO0WCDRbzu6a4JdvbYf+CICCqbnHaRnsQc5vPJE9N9nvExV+SSF6wJ/u7fy7ClPH1jjh+3uZi nxIhxISgtQdQM3HQf5o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DS
	Received 262 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (262 bytes) ;; HEADER SECTION ;; id = 24648 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20210215203456 20210116195729 20853 sidnlabs.nl. B7dxN+SU0bVo4smIzkH1TdLKi2vyhTTsJoPpxs0rt7lVMvnqnbLLeuIXilrwBMZVWKPT4g9Ojpyl 3/KkO0WCDRbzu6a4JdvbYf+CICCqbnHaRnsQc5vPJE9N9nvExV+SSF6wJ/u7fy7ClPH1jjh+3uZi nxIhxISgtQdQM3HQf5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20210215203456 20210116195729 20853 sidnlabs.nl. B7dxN+SU0bVo4smIzkH1TdLKi2vyhTTsJoPpxs0rt7lVMvnqnbLLeuIXilrwBMZVWKPT4g9Ojpyl 3/KkO0WCDRbzu6a4JdvbYf+CICCqbnHaRnsQc5vPJE9N9nvExV+SSF6wJ/u7fy7ClPH1jjh+3uZi nxIhxISgtQdQM3HQf5o= )`
	RRSIG=20853 and DNSKEY=20853 verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to powerdns.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (897 bytes) ;; HEADER SECTION ;; id = 49425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== ) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to yadifa.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Timeout querying yadifa.sidnlabs.nl/94.198.159.28 for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	All Queries to yadifa.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A timed out or failed
	Query to bind9.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 604 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (604 bytes) ;; HEADER SECTION ;; id = 52428 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	wb.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (387 bytes) ;; HEADER SECTION ;; id = 9154 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/NS
	Received 352 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (352 bytes) ;; HEADER SECTION ;; id = 13967 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. i0kgrR1tgaalzyNZq7rza72lr84rLyLeioiUXs9EIKhUQEba8a/nFkFHo9N8mKRjFoHlh/bLIfSB fHlKotKr2TaRlgOBw9OwQyzVbXgWyIK9r1OY5m+rX90XZnMdp2Fxi+JFjdnWGFUXql4ya1YbxbcV xzwYfv+JSEnY3VJ8vCM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found bad-dnssec.wb.sidnlabs.nl nameservers: yadifa.sidnlabs.nl, knot.sidnlabs.nl, powerdns.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl

bad-dnssec.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DS
	Received 404 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (404 bytes) ;; HEADER SECTION ;; id = 54126 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== ) bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for bad-dnssec.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=27185/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=27185/SHA-256 is now in the chain-of-trust
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc )`
	Query to powerdns.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (387 bytes) ;; HEADER SECTION ;; id = 293 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for bad-dnssec.wb.sidnlabs.nl
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185`
	DNSKEY=27185/SEP is now in the chain-of-trust
	DS=27185/SHA-256 verifies DNSKEY=27185/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DNSKEY RRset
	Query to knot.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (289 bytes) ;; HEADER SECTION ;; id = 25866 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bad-dnssec.wb.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 409 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (409 bytes) ;; HEADER SECTION ;; id = 49001 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbVCvU4W98LU5FnLRgZLeM2cvaLoQOZQt7mswwCF91TbmYcl+IGuBCRYGqgAPnKB04T6c6uR 4fiUkMvawrXcFgzIFr8t4ApAVQ6q4TeXLI0mw6aDPSH8f2164TjuHk+kZ27U+l3Bk9dy12cY5Ilb OhPNPjxBaA79/rQ6KMTAK6kH ) ; Key ID = 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. QYdewXl3G+zJREgfMoAviSSg+ZO9M6L4pQ8QOtf1DZfqSAVGlMFIcHwtzWeWN4zq0ugaapM643YR ATMgSykz7uzdMiJ81m3CQQR4jYyNcrX5hPTW3LJUJHcG65Dcm2Ge9jKZVGm5tSGeYGkfPtOUXUA1 0DNjC+aTQOBtE4ianfs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone sigexpired.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/NS
	Timeout querying yadifa.sidnlabs.nl/94.198.159.28 for sigexpired.bad-dnssec.wb.sidnlabs.nl/NS
	All Queries to yadifa.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/NS timed out or failed
	Query to knot.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/NS
	Received 363 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (363 bytes) ;; HEADER SECTION ;; id = 37730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. VovP7sWowv3kgDNOYKtcUyAOcxq5aZAQPfUOAB9YwPLol5Ddpyoj1H3CUDP0TjssWj8kCnMiNSW7 A3o9JW6OFyEpT4wFl0b4FiktuURpeh6aVAoHUdHj9uh14Yfhwb6hrshaUSX5vqSJqf+KKH1dzKVY 8nlUON/MQ6CNjbyz+UU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found sigexpired.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

sigexpired.bad-dnssec.wb.sidnlabs.nl

	Checking DS between bad-dnssec.wb.sidnlabs.nl and sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/DS
	Received 298 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (298 bytes) ;; HEADER SECTION ;; id = 20824 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 61837 8 2 3a3f79f4f6a4fc6e9b5370328200f4e1801d1beb6a9a705543af2cf65c84f330 ) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. jITatYapkCkNKs85b/k3Oz1t6OLeSjMRWCZyPXggdMj/6uw8hg9hwhL7l6Hb8HQPKsBaP07UEalb bEWljleiLMR4mTvQ+bDD6Qmoukaf93AE1Lr4ogaHIpdxbD7jkBQl5GSGQjVh/O1KpVwEgLxEO3v/ D/hs032KprW7vFHav8w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for sigexpired.bad-dnssec.wb.sidnlabs.nl in the bad-dnssec.wb.sidnlabs.nl zone
	DS=61837/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. jITatYapkCkNKs85b/k3Oz1t6OLeSjMRWCZyPXggdMj/6uw8hg9hwhL7l6Hb8HQPKsBaP07UEalb bEWljleiLMR4mTvQ+bDD6Qmoukaf93AE1Lr4ogaHIpdxbD7jkBQl5GSGQjVh/O1KpVwEgLxEO3v/ D/hs032KprW7vFHav8w= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DS RRset
	DS=61837/SHA-256 is now in the chain-of-trust
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 61837 8 2 3a3f79f4f6a4fc6e9b5370328200f4e1801d1beb6a9a705543af2cf65c84f330 )`
	Query to bind9.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 409 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (409 bytes) ;; HEADER SECTION ;; id = 5378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbVCvU4W98LU5FnLRgZLeM2cvaLoQOZQt7mswwCF91TbmYcl+IGuBCRYGqgAPnKB04T6c6uR 4fiUkMvawrXcFgzIFr8t4ApAVQ6q4TeXLI0mw6aDPSH8f2164TjuHk+kZ27U+l3Bk9dy12cY5Ilb OhPNPjxBaA79/rQ6KMTAK6kH ) ; Key ID = 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. QYdewXl3G+zJREgfMoAviSSg+ZO9M6L4pQ8QOtf1DZfqSAVGlMFIcHwtzWeWN4zq0ugaapM643YR ATMgSykz7uzdMiJ81m3CQQR4jYyNcrX5hPTW3LJUJHcG65Dcm2Ge9jKZVGm5tSGeYGkfPtOUXUA1 0DNjC+aTQOBtE4ianfs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for sigexpired.bad-dnssec.wb.sidnlabs.nl
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbVCvU4W98LU5FnLRgZLeM2cvaLoQOZQt7mswwCF91TbmYcl+IGuBCRYGqgAPnKB04T6c6uR 4fiUkMvawrXcFgzIFr8t4ApAVQ6q4TeXLI0mw6aDPSH8f2164TjuHk+kZ27U+l3Bk9dy12cY5Ilb OhPNPjxBaA79/rQ6KMTAK6kH ) ; Key ID = 61837`
	DNSKEY=61837/SEP is now in the chain-of-trust
	DS=61837/SHA-256 verifies DNSKEY=61837/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. QYdewXl3G+zJREgfMoAviSSg+ZO9M6L4pQ8QOtf1DZfqSAVGlMFIcHwtzWeWN4zq0ugaapM643YR ATMgSykz7uzdMiJ81m3CQQR4jYyNcrX5hPTW3LJUJHcG65Dcm2Ge9jKZVGm5tSGeYGkfPtOUXUA1 0DNjC+aTQOBtE4ianfs= )`
	RRSIG=61837 is expired
	None of the 1 RRSIG and 1 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any keys in the chain-of-trust
	Query to powerdns.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (289 bytes) ;; HEADER SECTION ;; id = 21893 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sigexpired.bad-dnssec.wb.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Timeout querying yadifa.sidnlabs.nl/94.198.159.28 for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	All Queries to yadifa.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY timed out or failed
	Query to powerdns.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 415 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (415 bytes) ;; HEADER SECTION ;; id = 23212 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcy79wLGT5aTJ5Ta81a/WYzb0q1z/GOoM9GNC3cN5whSojPpDtPhpoycBPCmhrEtJur8uYwb h0ZHHsBsbDRKbFMtm3at/RyiyD1N+UHJhw0LL9wZNzO6x2+MIhVF3Qx4Ni/JrhZQ1FuyMiD90z9/ cJq1v0M5WhUHEMiD/a5cmCkV ) ; Key ID = 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. K91l30140Bdqq0MB43N6MjKg7MUasjL5OibZNTaYvZxSj5zKo15d/Saih+KSGkD3IVdTDtTEWecz AIQki7lLsa3JDdqzGwTzRYxeyFyA7bi1LVhXduYxvwx4ocb0lZXpcf8Wg2T8wCa5udDREN1PTXb4 B6piVS7yYELqIVzjHlM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/NS
	Received 380 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (380 bytes) ;; HEADER SECTION ;; id = 13215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 6 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. HzGDr3EmPLJx9b2yje3XZBNX/oeU8lZut2WIPAmF1JmvqI44jeQAFermY4v2R2CxNdskST0pbYku +tD7JnBdAPO1hcNIwqH8h04PE+3gq2Sk+L3j1A4cuFJoL2bhypP1xxOhx/BzJDV5A2UqIxYmFFSn CNy2aCW5XS2TZl1oM2M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found ok.sigexpired.bad-dnssec.wb.sidnlabs.nl nameservers: nsd4.sidnlabs.nl, bind9.sidnlabs.nl, powerdns.sidnlabs.nl, knot.sidnlabs.nl, yadifa.sidnlabs.nl

ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

	Checking DS between sigexpired.bad-dnssec.wb.sidnlabs.nl and ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DS
	Received 312 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (312 bytes) ;; HEADER SECTION ;; id = 37772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 4255 8 2 11f7da18c2bc078a3a18a4fef6a25cc343a49cfd1a06b19c8bebb15cda109d9a ) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. cWrU+/O7wHj5QO8nkZWCyADYWI0YgBpJEi9V6u2EgMo505GZfzQhlnLWEJcm/EYbQMqVM9rKOYI8 cXNtuG+/ZFNFfsGSz1mI95IbLE5ZjBAcSMoOqjuOAQp17Zj+AQqjQjNDweTDxW92BmDnW4RfCmhE ljLK/n0Yw/2Ky+3eSjQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl in the sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	DS=4255/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. cWrU+/O7wHj5QO8nkZWCyADYWI0YgBpJEi9V6u2EgMo505GZfzQhlnLWEJcm/EYbQMqVM9rKOYI8 cXNtuG+/ZFNFfsGSz1mI95IbLE5ZjBAcSMoOqjuOAQp17Zj+AQqjQjNDweTDxW92BmDnW4RfCmhE ljLK/n0Yw/2Ky+3eSjQ= )`
	RRSIG=61837 is expired
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 4255 8 2 11f7da18c2bc078a3a18a4fef6a25cc343a49cfd1a06b19c8bebb15cda109d9a )`
	Query to nsd4.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 415 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (415 bytes) ;; HEADER SECTION ;; id = 59695 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcy79wLGT5aTJ5Ta81a/WYzb0q1z/GOoM9GNC3cN5whSojPpDtPhpoycBPCmhrEtJur8uYwb h0ZHHsBsbDRKbFMtm3at/RyiyD1N+UHJhw0LL9wZNzO6x2+MIhVF3Qx4Ni/JrhZQ1FuyMiD90z9/ cJq1v0M5WhUHEMiD/a5cmCkV ) ; Key ID = 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. K91l30140Bdqq0MB43N6MjKg7MUasjL5OibZNTaYvZxSj5zKo15d/Saih+KSGkD3IVdTDtTEWecz AIQki7lLsa3JDdqzGwTzRYxeyFyA7bi1LVhXduYxvwx4ocb0lZXpcf8Wg2T8wCa5udDREN1PTXb4 B6piVS7yYELqIVzjHlM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcy79wLGT5aTJ5Ta81a/WYzb0q1z/GOoM9GNC3cN5whSojPpDtPhpoycBPCmhrEtJur8uYwb h0ZHHsBsbDRKbFMtm3at/RyiyD1N+UHJhw0LL9wZNzO6x2+MIhVF3Qx4Ni/JrhZQ1FuyMiD90z9/ cJq1v0M5WhUHEMiD/a5cmCkV ) ; Key ID = 4255`
	DS=4255/SHA-256 verifies DNSKEY=4255/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. K91l30140Bdqq0MB43N6MjKg7MUasjL5OibZNTaYvZxSj5zKo15d/Saih+KSGkD3IVdTDtTEWecz AIQki7lLsa3JDdqzGwTzRYxeyFyA7bi1LVhXduYxvwx4ocb0lZXpcf8Wg2T8wCa5udDREN1PTXb4 B6piVS7yYELqIVzjHlM= )`
	RRSIG=4255 and DNSKEY=4255/SEP verifies the DNSKEY RRset
	Query to bind9.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 604 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (604 bytes) ;; HEADER SECTION ;; id = 5527 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ok.sigexpired.bad-dnssec.wb.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 421 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (421 bytes) ;; HEADER SECTION ;; id = 58728 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcSpz9eE8jAKxxeQd3/CKIM3OI7/X9J9Y19MtTMuMGel2WTwvutZIv+cZnKVBf8nXgRUZOGp ePTmLhYLvjxtsoG+d4IDSD/AUCisDbpF0KQVSWXbBmUuOy91i8LGav3Dn32rgOqF8OeF0kr52J4j OJQYwA0zpoZbkgTvX93ksRmV ) ; Key ID = 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. oX8wF8ZxdfDveghXAOJECmhFK+J4ezOdydJXLMQjg5pNi6CsaIWYM+TrpHJFYCs8/iTs5wpOK7kf xu28H2MCVkM+MdxOiZShUc8JTv/nW9eAb011E+QL2Dc9Mrcr8RVkDpReKZn+N+ut0ar/Cpa04fq3 3KiQIupFEhAUYUTMDUE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/NS
	Received 386 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (386 bytes) ;; HEADER SECTION ;; id = 25086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, yadifa.sidnlabs.nl, bind9.sidnlabs.nl, powerdns.sidnlabs.nl

ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

	Checking DS between ok.sigexpired.bad-dnssec.wb.sidnlabs.nl and ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DS
	Received 318 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (318 bytes) ;; HEADER SECTION ;; id = 52350 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 4712 8 2 23319fa0c128a1ecccca14cc8067e5d32f822cc9cb3aa231006a1a8559dab182 ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. EMc0I4F/hX7mW/VFBf/W0EhiKTLejMb4xvrD5E2ZshxsWQ1iao60nWBeLXHtRXlO/Wj5tiOta7Gr tjEMekDDDK+nvqIpBRO9geXTQxBztDWX6cUlqSMuqBFqJU0ggQOOJ0XvayexQVM6WENe8bLoAj0a tgigX/Q3UIfB1e2Nv7c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl in the ok.sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	DS=4712/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. EMc0I4F/hX7mW/VFBf/W0EhiKTLejMb4xvrD5E2ZshxsWQ1iao60nWBeLXHtRXlO/Wj5tiOta7Gr tjEMekDDDK+nvqIpBRO9geXTQxBztDWX6cUlqSMuqBFqJU0ggQOOJ0XvayexQVM6WENe8bLoAj0a tgigX/Q3UIfB1e2Nv7c= )`
	RRSIG=4255 and DNSKEY=4255/SEP verifies the DS RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 4712 8 2 23319fa0c128a1ecccca14cc8067e5d32f822cc9cb3aa231006a1a8559dab182 )`
	Query to powerdns.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 421 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (421 bytes) ;; HEADER SECTION ;; id = 46544 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. oX8wF8ZxdfDveghXAOJECmhFK+J4ezOdydJXLMQjg5pNi6CsaIWYM+TrpHJFYCs8/iTs5wpOK7kf xu28H2MCVkM+MdxOiZShUc8JTv/nW9eAb011E+QL2Dc9Mrcr8RVkDpReKZn+N+ut0ar/Cpa04fq3 3KiQIupFEhAUYUTMDUE= ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcSpz9eE8jAKxxeQd3/CKIM3OI7/X9J9Y19MtTMuMGel2WTwvutZIv+cZnKVBf8nXgRUZOGp ePTmLhYLvjxtsoG+d4IDSD/AUCisDbpF0KQVSWXbBmUuOy91i8LGav3Dn32rgOqF8OeF0kr52J4j OJQYwA0zpoZbkgTvX93ksRmV ) ; Key ID = 4712 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcSpz9eE8jAKxxeQd3/CKIM3OI7/X9J9Y19MtTMuMGel2WTwvutZIv+cZnKVBf8nXgRUZOGp ePTmLhYLvjxtsoG+d4IDSD/AUCisDbpF0KQVSWXbBmUuOy91i8LGav3Dn32rgOqF8OeF0kr52J4j OJQYwA0zpoZbkgTvX93ksRmV ) ; Key ID = 4712`
	DS=4712/SHA-256 verifies DNSKEY=4712/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. oX8wF8ZxdfDveghXAOJECmhFK+J4ezOdydJXLMQjg5pNi6CsaIWYM+TrpHJFYCs8/iTs5wpOK7kf xu28H2MCVkM+MdxOiZShUc8JTv/nW9eAb011E+QL2Dc9Mrcr8RVkDpReKZn+N+ut0ar/Cpa04fq3 3KiQIupFEhAUYUTMDUE= )`
	RRSIG=4712 and DNSKEY=4712/SEP verifies the DNSKEY RRset
	Query to powerdns.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (289 bytes) ;; HEADER SECTION ;; id = 61079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 326 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (326 bytes) ;; HEADER SECTION ;; id = 30422 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. s1T+zc4LJn86F/4V8pCeB1+sDcOuZrixFMpQGW0PL+WV2Wp4D5FAWvzu2ff/iA0jnIRet0h+6UPc OLSsoM4UpG5QOu8GJXW81q/k3ut9JrsgJF2WmxCmBe2GwbbpE3Ib3CxuN3vGCSxqojf6Vh6dMgNB hls7h5j3/skAmmemV8U= ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 624 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (624 bytes) ;; HEADER SECTION ;; id = 22714 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. s1T+zc4LJn86F/4V8pCeB1+sDcOuZrixFMpQGW0PL+WV2Wp4D5FAWvzu2ff/iA0jnIRet0h+6UPc OLSsoM4UpG5QOu8GJXW81q/k3ut9JrsgJF2WmxCmBe2GwbbpE3Ib3CxuN3vGCSxqojf6Vh6dMgNB hls7h5j3/skAmmemV8U= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to bind9.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 635 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (635 bytes) ;; HEADER SECTION ;; id = 25935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. s1T+zc4LJn86F/4V8pCeB1+sDcOuZrixFMpQGW0PL+WV2Wp4D5FAWvzu2ff/iA0jnIRet0h+6UPc OLSsoM4UpG5QOu8GJXW81q/k3ut9JrsgJF2WmxCmBe2GwbbpE3Ib3CxuN3vGCSxqojf6Vh6dMgNB hls7h5j3/skAmmemV8U= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to knot.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 326 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (326 bytes) ;; HEADER SECTION ;; id = 27822 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. s1T+zc4LJn86F/4V8pCeB1+sDcOuZrixFMpQGW0PL+WV2Wp4D5FAWvzu2ff/iA0jnIRet0h+6UPc OLSsoM4UpG5QOu8GJXW81q/k3ut9JrsgJF2WmxCmBe2GwbbpE3Ib3CxuN3vGCSxqojf6Vh6dMgNB hls7h5j3/skAmmemV8U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to powerdns.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (289 bytes) ;; HEADER SECTION ;; id = 1088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= )`
	RRSIG=4712 and DNSKEY=4712/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: