DNSSEC Analyzer - ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

Domain Name:

Time: 2020-04-07 14:43:40 UTC, NTP stratum 4

Analyzing DNSSEC problems for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (1139 bytes) ;; HEADER SECTION ;; id = 62975 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200422000000 20200401000000 20326 . MYL1CcghvT4i0z7u1GFvZtGlwjU4pNZxjY8pzsZbfaWJvjA6mwQCReH2PcVjvtr7syyUhLlPHj2B xFbbb/YDbU7Fth14eI2YTChuVkrO6xR/IGf5eIYEF4Aw6gJZGp7tIchnf+Ms+pUiaWnXEpMkIZc4 HvsuuJ+HfDcvWAzyB542TsNxW9VKUfprEgX4/oQ5SLIl/HnoRRdZWZRH+GnLJ6eL5kDLrkxg8mHl rqWjC8tXJm6fpQa8Z2KdH6vlSj85z6ALy6TuXOWosC0s2M2dslQCxBm57an45uJZvfLqjn+ZdDi/ v16sPWOI/56QvdbSRHgIXIMOzQ6GBCTneThIhQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	DNSKEY=33853 is now in the chain-of-trust
	Query to m.root-servers.net for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 596 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (596 bytes) ;; HEADER SECTION ;; id = 30250 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20200420050000 20200407040000 48903 . IW/WeHx4HeKl/NCzeA+PeFZ5WawbDLIvYAY+7TnNTbNtlQ7dTu6y/v+vNIZz1ztXgkn+UKaL6xmv U1HKEKO4AHygWRFN3iXdmUYQcgVex4BoUvwSLikuFOmVBeAsEGB71TMyoLZDryJW1b7tYv+RWdkI K6w1bR5Tt+O6FtWVPkipfiwX1cXyLGxm1UkP/ViHQnh0lxbhICgOwWHGb0Qt+ZeGBKlvyxp0WD9S RjG/W9ovbIx3sf5wgQ18SzPjk+gADAZ4jkLaJcDSaL78P5RsW3XqVxhasSVtS9G96T2gwhdkv5/S eAUUEqEPEriuhIvFpfJ8/UDTO4YS/4vnQctLpw== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for nl/DNSKEY
	Received 556 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (556 bytes) ;; HEADER SECTION ;; id = 29652 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20200420050000 20200407040000 48903 . IW/WeHx4HeKl/NCzeA+PeFZ5WawbDLIvYAY+7TnNTbNtlQ7dTu6y/v+vNIZz1ztXgkn+UKaL6xmv U1HKEKO4AHygWRFN3iXdmUYQcgVex4BoUvwSLikuFOmVBeAsEGB71TMyoLZDryJW1b7tYv+RWdkI K6w1bR5Tt+O6FtWVPkipfiwX1cXyLGxm1UkP/ViHQnh0lxbhICgOwWHGb0Qt+ZeGBKlvyxp0WD9S RjG/W9ovbIx3sf5wgQ18SzPjk+gADAZ4jkLaJcDSaL78P5RsW3XqVxhasSVtS9G96T2gwhdkv5/S eAUUEqEPEriuhIvFpfJ8/UDTO4YS/4vnQctLpw== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to g.root-servers.net for nl/DS
	Received 366 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (366 bytes) ;; HEADER SECTION ;; id = 4768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20200420050000 20200407040000 48903 . IW/WeHx4HeKl/NCzeA+PeFZ5WawbDLIvYAY+7TnNTbNtlQ7dTu6y/v+vNIZz1ztXgkn+UKaL6xmv U1HKEKO4AHygWRFN3iXdmUYQcgVex4BoUvwSLikuFOmVBeAsEGB71TMyoLZDryJW1b7tYv+RWdkI K6w1bR5Tt+O6FtWVPkipfiwX1cXyLGxm1UkP/ViHQnh0lxbhICgOwWHGb0Qt+ZeGBKlvyxp0WD9S RjG/W9ovbIx3sf5wgQ18SzPjk+gADAZ4jkLaJcDSaL78P5RsW3XqVxhasSVtS9G96T2gwhdkv5/S eAUUEqEPEriuhIvFpfJ8/UDTO4YS/4vnQctLpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20200420050000 20200407040000 48903 . IW/WeHx4HeKl/NCzeA+PeFZ5WawbDLIvYAY+7TnNTbNtlQ7dTu6y/v+vNIZz1ztXgkn+UKaL6xmv U1HKEKO4AHygWRFN3iXdmUYQcgVex4BoUvwSLikuFOmVBeAsEGB71TMyoLZDryJW1b7tYv+RWdkI K6w1bR5Tt+O6FtWVPkipfiwX1cXyLGxm1UkP/ViHQnh0lxbhICgOwWHGb0Qt+ZeGBKlvyxp0WD9S RjG/W9ovbIx3sf5wgQ18SzPjk+gADAZ4jkLaJcDSaL78P5RsW3XqVxhasSVtS9G96T2gwhdkv5/S eAUUEqEPEriuhIvFpfJ8/UDTO4YS/4vnQctLpw== )`
	RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns3.dns.nl for nl/DNSKEY
	Received 745 bytes from 194.0.25.24
	;; Answer received from 194.0.25.24 (745 bytes) ;; HEADER SECTION ;; id = 31152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 8 AwEAAcH5VNSzyA2AzcGJlmZd7vlz+3bH9NFfUeJs/kAraSlsgZJxMqRhGFRCZEFABgkl8xe48r2X SKznIunPYjhKk3L/2aw7pa5Wmjo7p57CgBUG6HYJmT6fKkmVhzbOPH2PgcuftjhGvhiFg7c3IMlh W1OA+nacEHwD9E2o1eYH8t/d ) ; Key ID = 39199 nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20200421144012 20200407060702 34112 nl. pJHXWG/qQqQR/TCpEt+HU6BtHiFuUxzPOG1FTclCdYHHxlJjTszVOx9Df1fg3Z8YD25bgay/9BnK TYBsTzhNCBgpG+mtv2LBVt94SJmWkJTJfaI2a6I3T5dRt11PAHtm5mLkV55uVtYG5UeV+BYhLmRL za0Hy94zCjyNw27Vk25PSOwFeRwK4U5RckSBHU8wowAMX04T0XMZXcKEgS2wZ3LbamtPF9AcN6nq B/gCq+1goev4as+FyL2YsAEA2vCrtBoD9OzyLuhOtj79QOHFmTScUK1MHNtXFxw+2kduqTltOmNY 9w5WXmI4XLrCoE4CoALlvYwjjA9hd/Oc+IFPxQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAcH5VNSzyA2AzcGJlmZd7vlz+3bH9NFfUeJs/kAraSlsgZJxMqRhGFRCZEFABgkl8xe48r2X SKznIunPYjhKk3L/2aw7pa5Wmjo7p57CgBUG6HYJmT6fKkmVhzbOPH2PgcuftjhGvhiFg7c3IMlh W1OA+nacEHwD9E2o1eYH8t/d ) ; Key ID = 39199`
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20200421144012 20200407060702 34112 nl. pJHXWG/qQqQR/TCpEt+HU6BtHiFuUxzPOG1FTclCdYHHxlJjTszVOx9Df1fg3Z8YD25bgay/9BnK TYBsTzhNCBgpG+mtv2LBVt94SJmWkJTJfaI2a6I3T5dRt11PAHtm5mLkV55uVtYG5UeV+BYhLmRL za0Hy94zCjyNw27Vk25PSOwFeRwK4U5RckSBHU8wowAMX04T0XMZXcKEgS2wZ3LbamtPF9AcN6nq B/gCq+1goev4as+FyL2YsAEA2vCrtBoD9OzyLuhOtj79QOHFmTScUK1MHNtXFxw+2kduqTltOmNY 9w5WXmI4XLrCoE4CoALlvYwjjA9hd/Oc+IFPxQ== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=39199 is now in the chain-of-trust
	Query to ns2.dns.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 423 bytes from 194.146.106.42
	;; Answer received from 194.146.106.42 (423 bytes) ;; HEADER SECTION ;; id = 50451 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20200411165934 20200328093702 39199 nl. QbNt3f50kPujoXstU0CTAplWf36t37w1tmHDRjm8Aq+lJThqxbxC7OHdGh29d6XEoK79hRVyoHf5 bARJkm5yOttzcdKxC+8GaRyNol3PpfTUwh5M8JZS3/8U4kqEh9GD1j84MJsG2shfFiT8N8Ecz2P9 cTjslvzhx1OsM4ZSSU8= ) ;; ADDITIONAL SECTION (5 records) ns2.sidn.nl. 3600 IN A 194.171.17.5 ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns2.sidn.nl. 3600 IN AAAA 2001:610:0:800d::5 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.dns.nl for sidnlabs.nl/DNSKEY
	Received 379 bytes from 194.0.28.53
	;; Answer received from 194.0.28.53 (379 bytes) ;; HEADER SECTION ;; id = 20112 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20200411165934 20200328093702 39199 nl. QbNt3f50kPujoXstU0CTAplWf36t37w1tmHDRjm8Aq+lJThqxbxC7OHdGh29d6XEoK79hRVyoHf5 bARJkm5yOttzcdKxC+8GaRyNol3PpfTUwh5M8JZS3/8U4kqEh9GD1j84MJsG2shfFiT8N8Ecz2P9 cTjslvzhx1OsM4ZSSU8= ) ;; ADDITIONAL SECTION (5 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidn.nl. 3600 IN A 194.171.17.5 ns2.sidn.nl. 3600 IN AAAA 2001:610:0:800d::5 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns1.dns.nl for sidnlabs.nl/DS
	Received 250 bytes from 194.0.28.53
	;; Answer received from 194.0.28.53 (250 bytes) ;; HEADER SECTION ;; id = 37470 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20200411165934 20200328093702 39199 nl. QbNt3f50kPujoXstU0CTAplWf36t37w1tmHDRjm8Aq+lJThqxbxC7OHdGh29d6XEoK79hRVyoHf5 bARJkm5yOttzcdKxC+8GaRyNol3PpfTUwh5M8JZS3/8U4kqEh9GD1j84MJsG2shfFiT8N8Ecz2P9 cTjslvzhx1OsM4ZSSU8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=52720/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20200411165934 20200328093702 39199 nl. QbNt3f50kPujoXstU0CTAplWf36t37w1tmHDRjm8Aq+lJThqxbxC7OHdGh29d6XEoK79hRVyoHf5 bARJkm5yOttzcdKxC+8GaRyNol3PpfTUwh5M8JZS3/8U4kqEh9GD1j84MJsG2shfFiT8N8Ecz2P9 cTjslvzhx1OsM4ZSSU8= )`
	RRSIG=39199 and DNSKEY=39199 verifies the DS RRset
	DS=52720/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df )`
	Query to ns1.sidnlabs.nl for sidnlabs.nl/DNSKEY
	Received 934 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (934 bytes) ;; HEADER SECTION ;; id = 1865 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (4 records) sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720 sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200423051207 20200324043614 20853 sidnlabs.nl. joVek8KkVlg8Mwjeg/eLKKYVkpPRLiioAO0Jz7qXYVqDw+/eDJ4a3u1XqhUVoz27gzNC7zTRR81Y toMHDHL4QYpli4qS/bBSnlmlJu23uiNuJWESs+r3x+gK6ENA3d64Hf9lONY4luBrUXveRf1sIB1I m0azCEwc5N2c19wvO1M= ) sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200423051207 20200324043614 52720 sidnlabs.nl. glWiggZ+cPIhRfqFOTxGjh0n6uf25olydq7r7xsFsGZrCKLUG3tcdWfn6pHaYlOTtDxIWrxyW+Hj pzscyTJfjKvkOsU7AsXRozwqEY6ygDUpK0l2Tr0kSRzbGfMMas7cdp8u8BVGdmNWujrQpRG48uqb Pw61ArpdIlMf8e6XXxlIk5kGYbsaOEVaJYK9Hocq/zFHq/FQrmzqE2mfo6nxM+wk/NnQq6AljvXl vltUEtUrCzmzMg2aQDjOOCIBN5GwdNMP4Ozv+9XRstgJY/RGCE3ca1xm8kaCKcrvhuXqGuHB5NzT KlO3IdfX7Mk9rFKvWKo7h0ET60cKDbHd8IK57A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720`
	`sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853`
	DNSKEY=52720/SEP is now in the chain-of-trust
	DS=52720/SHA-256 verifies DNSKEY=52720/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200423051207 20200324043614 20853 sidnlabs.nl. joVek8KkVlg8Mwjeg/eLKKYVkpPRLiioAO0Jz7qXYVqDw+/eDJ4a3u1XqhUVoz27gzNC7zTRR81Y toMHDHL4QYpli4qS/bBSnlmlJu23uiNuJWESs+r3x+gK6ENA3d64Hf9lONY4luBrUXveRf1sIB1I m0azCEwc5N2c19wvO1M= )`
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200423051207 20200324043614 52720 sidnlabs.nl. glWiggZ+cPIhRfqFOTxGjh0n6uf25olydq7r7xsFsGZrCKLUG3tcdWfn6pHaYlOTtDxIWrxyW+Hj pzscyTJfjKvkOsU7AsXRozwqEY6ygDUpK0l2Tr0kSRzbGfMMas7cdp8u8BVGdmNWujrQpRG48uqb Pw61ArpdIlMf8e6XXxlIk5kGYbsaOEVaJYK9Hocq/zFHq/FQrmzqE2mfo6nxM+wk/NnQq6AljvXl vltUEtUrCzmzMg2aQDjOOCIBN5GwdNMP4Ozv+9XRstgJY/RGCE3ca1xm8kaCKcrvhuXqGuHB5NzT KlO3IdfX7Mk9rFKvWKo7h0ET60cKDbHd8IK57A== )`
	RRSIG=20853 and DNSKEY=20853 verifies the DNSKEY RRset
	RRSIG=52720 and DNSKEY=52720/SEP verifies the DNSKEY RRset
	DNSKEY=20853 is now in the chain-of-trust
	Query to ns2.sidn.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 2322 bytes from 194.171.17.5
	;; Answer received from 194.171.17.5 (2322 bytes) ;; HEADER SECTION ;; id = 13277 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20200429134822 20200330133148 20853 sidnlabs.nl. BCA+BmXh1ZmoiU2C2itD7rZG1qq9Pxuwtpg7s2SKULjo8SNugv+5UW+eWA/5HsMYg5Pjei5wGjoh uXT9msvpiLtOGyLo5yHnHbqi/YL9w13JFwP4FQo4Blxtk4aEQnOomqDl9jikEksPQNe/gBZsvHex QMAJFZ94mEwPo4160Qw= ) ;; ADDITIONAL SECTION (21 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20200429055236 20200330054401 20853 sidnlabs.nl. XP3XtNJKL5AfP/6+gYVlWsSJHO54ywcuVel8x2hPyGT+BWrw5PkpHJh8bpcJdcqZyVDQ+7F0B9kd txNAxT93mujxKfCileoGmzWUqAYp+56dfaTldZzjQLeUPJt3CE5pmJwBwuDTqM+1ybKCOuXQBghW ++5JOHMNWWeDDrWTepQ= ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20200429055236 20200330054401 20853 sidnlabs.nl. kkU0KEVnAI6jzLH7wHIFLIGKNVhZhKud/DYWtafhgCjea35qkD2KsI7OfFHsunVF0k4CjLjcyCS8 pTFdccsDtiI46K8ftXMPRQcZXzq7pDdcVZrWpzfy5G07Dy/nZf/oj90FSdfI24+FcNcvMvf20GUF vkJLyb1iJ3xM/BLs78k= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20200418220410 20200319211454 20853 sidnlabs.nl. qCDB2lsJooJEOVlYH2BW1FuabAaqCvYqEDj4Oa63kH7kyIrj+vVnsQHiLOrlHN10e1tp3Ja1cd5t 41OBhQ1Snl61BuEqbOJrNZp584aXfYG4PWBHRfdKdiACDYnuHKZGnQpGg749YWZoV7Cm0Q5TU4k7 AE8+m36MPos31tEaRCE= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20200418220410 20200319211454 20853 sidnlabs.nl. ymvlJZtjSb/3B9ED6XudSgHqY0khfxL2vsVRXJWBJ7spLNi7ebToxr7nQ/6R9p6JMSqB816ICcPk MEd22MKw4Oqn9areccTB5+Sq774QjPI/zHCJ1bagxkazlJzsPpLOxQB8VyJ7feyk5+U/n//Ls8Mo 17/HESyLiSwv2/XBLyQ= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20200502125817 20200402120952 20853 sidnlabs.nl. NCOZ+qSLMSf6zJeu1aI9dhJu3OuzYZM8cXJYr42tSECHeV4JgjFfP9i0lVlRNO8gXZZcF8Z/u/jl jCI9pxz16sDP7TvVj8wdq10XA3c/8WBf/eGqUyW4TX8ir86v4d3lGyg/w7WuR4gpFGzV57jxu8h/ qtwG+DRskMFMepjJ54M= ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20200502125817 20200402120952 20853 sidnlabs.nl. nKnO6RcalT/70Az5fQ3Okt1iKZNUMuVLH+/kD2i8g0zdHe74ca2C9mlHNO/zuit/mDr5NLV2+E/P 0efQaN/bbkwnyurLRL6mH4KZHW+es1eALOZcbbkLBX057XOB0fRosPrCxQcBTTjGe5lREuvpP5e8 RZkgDAziWlJ2j+fT0Uc= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20200422143057 20200323134707 20853 sidnlabs.nl. hxig7kN7k7fIFBv4Iwg1qnoOZj5TPWG/Dk5/oNF9J3VFPoJU7p4vp8gdjs3yS30jF3d7VgKeOFHg Z1m2QJB9eCTMhq+hmmvOcwwrJXCWDug6qilhBv5EUsPfVSmxJhzxSgY5RvRjZSXqJXmokgzK0Erp yuErt+rmu1zD1HwjI0M= ) yadifa.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20200422143057 20200323134707 20853 sidnlabs.nl. Ck5WGBaodOobEuML/0t3VktDdfUaekHaeXcgpSaPerHpHjbqrAPKYXYPIsinOFS1Dm5qLAF9Pn8E quJZIMkgrLix6aui7YO0D509eMPrODer8lm3iItPQckbgoEDRwIxFTcatgTKBhut+1MFaVB+cG1/ zvdnU7IQwyhiZzxyDE0= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20200430200342 20200331191632 20853 sidnlabs.nl. RZUj0k33PyNQP4phgcJIhiYWxk4Gg95PrST/KMavXxvETaNbvbSzmxSY3L3+wjDV7onVu9GMRrF4 WNlwJIwKQ3DCmvFsZDIEnlo07fl+UnJjvIf38C2yaYy5ZRRPE4tyk/ZqVrTnhW1rtimyedoLjVXs FZvEX/zM9NCrhUDQ07w= ) powerdns.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20200430200342 20200331191632 20853 sidnlabs.nl. EN8lB1cKJKaFPduaOJmGh2U0ng7cKFeUnTt1VVtZYyhbol7Ou2oiX9OJqK9Xh1LGouNKrQy9cmob FnH4IENn+KDsFMMDo4BTwXwNrzDrO2OWl+HZkPVacveZLhZdg265b3zggEd5MY2bhfKHhy0Bsg/3 0Ir9gi8Cn65TMUhMxqw= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 364 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (364 bytes) ;; HEADER SECTION ;; id = 8579 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20200429134822 20200330133148 20853 sidnlabs.nl. BCA+BmXh1ZmoiU2C2itD7rZG1qq9Pxuwtpg7s2SKULjo8SNugv+5UW+eWA/5HsMYg5Pjei5wGjoh uXT9msvpiLtOGyLo5yHnHbqi/YL9w13JFwP4FQo4Blxtk4aEQnOomqDl9jikEksPQNe/gBZsvHex QMAJFZ94mEwPo4160Qw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DS
	Received 262 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (262 bytes) ;; HEADER SECTION ;; id = 42053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20200429134822 20200330133148 20853 sidnlabs.nl. BCA+BmXh1ZmoiU2C2itD7rZG1qq9Pxuwtpg7s2SKULjo8SNugv+5UW+eWA/5HsMYg5Pjei5wGjoh uXT9msvpiLtOGyLo5yHnHbqi/YL9w13JFwP4FQo4Blxtk4aEQnOomqDl9jikEksPQNe/gBZsvHex QMAJFZ94mEwPo4160Qw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20200429134822 20200330133148 20853 sidnlabs.nl. BCA+BmXh1ZmoiU2C2itD7rZG1qq9Pxuwtpg7s2SKULjo8SNugv+5UW+eWA/5HsMYg5Pjei5wGjoh uXT9msvpiLtOGyLo5yHnHbqi/YL9w13JFwP4FQo4Blxtk4aEQnOomqDl9jikEksPQNe/gBZsvHex QMAJFZ94mEwPo4160Qw= )`
	RRSIG=20853 and DNSKEY=20853 verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to bind9.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (897 bytes) ;; HEADER SECTION ;; id = 57237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378 wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20190314080033 44704 wb.sidnlabs.nl. AI/omO4ijjlwhfWMfOO7gThbpHqvnzAMNGkFtPyLl1S79AwN0D8us2B3n9D8xIwKoccd3i2rITrx 2VQ/Hz0j8gE18b77quJgkOCM7oJ652tt4MazAT4rEI2EhawkEuFbEPllPllBPnCKhS1YMhyGFptc D1vRHPJAR9ABBcEr/sdT8KwfXb1zY6qd33Meh6No8aOZnFrHyU8PKtRKS7SCNG1p3hA47cv3awE1 tJ/G5ue46428AQ9ljCN7I4sKN9/KryE3Gh5ayXGXJYQrgCmJwkAsz76oFPT0ZKyI4hAW0ak1mqmO KR5hV4TYpkjAt4F3gKRpp8rtaUJCpW8r6VqanA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20190314080033 44704 wb.sidnlabs.nl. AI/omO4ijjlwhfWMfOO7gThbpHqvnzAMNGkFtPyLl1S79AwN0D8us2B3n9D8xIwKoccd3i2rITrx 2VQ/Hz0j8gE18b77quJgkOCM7oJ652tt4MazAT4rEI2EhawkEuFbEPllPllBPnCKhS1YMhyGFptc D1vRHPJAR9ABBcEr/sdT8KwfXb1zY6qd33Meh6No8aOZnFrHyU8PKtRKS7SCNG1p3hA47cv3awE1 tJ/G5ue46428AQ9ljCN7I4sKN9/KryE3Gh5ayXGXJYQrgCmJwkAsz76oFPT0ZKyI4hAW0ak1mqmO KR5hV4TYpkjAt4F3gKRpp8rtaUJCpW8r6VqanA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to bind9.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 593 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (593 bytes) ;; HEADER SECTION ;; id = 14780 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. jEosbAQIdu8hZtJQfq5BfVrjLoHOVQ6a58luUlWx7oMCyFEtY9xwVGnqAMDvXt3lKyXEwDyj9LtB 4eHDhCQLcAZUNqz+imFdzItLguvJrpaP79mKfO/UGrvy5J9O/ZU5DTCmbo1bwhkziaPsf2rIIHry 2MPbR0Rxv2jb3aeQFz0= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. SQNG7M0PlpuXmOO2LSvU91pX7XDJbY1LVlbngx4i054fEsLnA1OHLNcmZizrHo7qBRlRQR5wu1M8 ZkspCJXoTXZRkk/9x00U4Ct/Y9xQ50462U4Q5ImQn9boMvC2f/QPJuoKYvUXtJQ2lX33RXJKKPnZ uH4CA5KTsC1lhZU5ypk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	wb.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (387 bytes) ;; HEADER SECTION ;; id = 3921 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAfVJUH6leWTOMbvpaVWcScJtY8MT3ke06vX6tR9fNmFc3tk8QvmMPty/EhBy/xEKsxp78D9L l3p7SjwQhlYMnTwF59KylVn7ehcYC2IhjebSTD0FaRGoiedqZMxKdrV7W9j6my8gfB6a0Hxxn7/K gAFEq9kDnR8q5xlIUcdFbttb ) ; Key ID = 56725 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20190314080032 56725 bad-dnssec.wb.sidnlabs.nl. GeHTMEt01cXoBT2k5VzElNER2bVvMueyEEmfLSBdA/qRW83hvwx+7kaMC2McKZqgepGmA16TYuFv uaqG9EizMFrV34ApTPo3i5AEZXY8cOR2yV0sKEOrQDQmoO5Wm4+PLKTFk60aV+WkLjLnFma1OHd+ Z8JuvycLwrZTO+gr418= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/NS
	Received 341 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (341 bytes) ;; HEADER SECTION ;; id = 57758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20190314080032 56725 bad-dnssec.wb.sidnlabs.nl. qZvrTLwxBffZQaRl0y5ikwO3EUcIrukILlObpNTpFgfCvWxw59ntqlCuYqt79hKaOwI3Qje6IfYf buCdgtBtHMuOg3Mz3aa8frxQA2xvP3MgZ3TglLvDgVSfW64JSSfFy4psQNRUDrMgtBs4Und5WIoF bzxx11I/h4jltLPsY2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

bad-dnssec.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DS
	Received 404 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (404 bytes) ;; HEADER SECTION ;; id = 2055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 56725 8 2 b4eeaf8d87672e12e332fa13bc0628db69676a9853ccd54455341d87b5ddea9c ) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20190314080033 48378 wb.sidnlabs.nl. R9rLIuYVY6YrOAF0rkXLPOszcamHC2U5FoOXtBRlReprzl4rPSjKR0P8fD/g+lN+QNjf48ytCjcD bq/d8IHDoTd67v/UGOhdcmBHH8LL1pUBnnhLFcYyh9iK0ti6DQN24jheCIwqtib1lrFob6dukzR0 r0qD7vW0UpKWsym5EoUgOMSqW9TMX8G/oyh0VwZ5x7H0ej6sd+ongq3dCy41ULgmXm7Zq4wskvns omAxez38rybJeJy9RKFM+DLQMrD0htgXEkuz7uTHLc5kW08ZdxN11SxwbDk7xNMfnlOa+Dcc707X ixAGjr+9pKQmZLHRiIpeMbIPDsZ5IexRbsDTrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for bad-dnssec.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=56725/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20190314080033 48378 wb.sidnlabs.nl. R9rLIuYVY6YrOAF0rkXLPOszcamHC2U5FoOXtBRlReprzl4rPSjKR0P8fD/g+lN+QNjf48ytCjcD bq/d8IHDoTd67v/UGOhdcmBHH8LL1pUBnnhLFcYyh9iK0ti6DQN24jheCIwqtib1lrFob6dukzR0 r0qD7vW0UpKWsym5EoUgOMSqW9TMX8G/oyh0VwZ5x7H0ej6sd+ongq3dCy41ULgmXm7Zq4wskvns omAxez38rybJeJy9RKFM+DLQMrD0htgXEkuz7uTHLc5kW08ZdxN11SxwbDk7xNMfnlOa+Dcc707X ixAGjr+9pKQmZLHRiIpeMbIPDsZ5IexRbsDTrQ== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=56725/SHA-256 is now in the chain-of-trust
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 56725 8 2 b4eeaf8d87672e12e332fa13bc0628db69676a9853ccd54455341d87b5ddea9c )`
	Query to knot.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (387 bytes) ;; HEADER SECTION ;; id = 1104 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAfVJUH6leWTOMbvpaVWcScJtY8MT3ke06vX6tR9fNmFc3tk8QvmMPty/EhBy/xEKsxp78D9L l3p7SjwQhlYMnTwF59KylVn7ehcYC2IhjebSTD0FaRGoiedqZMxKdrV7W9j6my8gfB6a0Hxxn7/K gAFEq9kDnR8q5xlIUcdFbttb ) ; Key ID = 56725 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20190314080032 56725 bad-dnssec.wb.sidnlabs.nl. GeHTMEt01cXoBT2k5VzElNER2bVvMueyEEmfLSBdA/qRW83hvwx+7kaMC2McKZqgepGmA16TYuFv uaqG9EizMFrV34ApTPo3i5AEZXY8cOR2yV0sKEOrQDQmoO5Wm4+PLKTFk60aV+WkLjLnFma1OHd+ Z8JuvycLwrZTO+gr418= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for bad-dnssec.wb.sidnlabs.nl
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAfVJUH6leWTOMbvpaVWcScJtY8MT3ke06vX6tR9fNmFc3tk8QvmMPty/EhBy/xEKsxp78D9L l3p7SjwQhlYMnTwF59KylVn7ehcYC2IhjebSTD0FaRGoiedqZMxKdrV7W9j6my8gfB6a0Hxxn7/K gAFEq9kDnR8q5xlIUcdFbttb ) ; Key ID = 56725`
	DNSKEY=56725/SEP is now in the chain-of-trust
	DS=56725/SHA-256 verifies DNSKEY=56725/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20190314080032 56725 bad-dnssec.wb.sidnlabs.nl. GeHTMEt01cXoBT2k5VzElNER2bVvMueyEEmfLSBdA/qRW83hvwx+7kaMC2McKZqgepGmA16TYuFv uaqG9EizMFrV34ApTPo3i5AEZXY8cOR2yV0sKEOrQDQmoO5Wm4+PLKTFk60aV+WkLjLnFma1OHd+ Z8JuvycLwrZTO+gr418= )`
	RRSIG=56725 and DNSKEY=56725/SEP verifies the DNSKEY RRset
	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 593 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (593 bytes) ;; HEADER SECTION ;; id = 60717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. jEosbAQIdu8hZtJQfq5BfVrjLoHOVQ6a58luUlWx7oMCyFEtY9xwVGnqAMDvXt3lKyXEwDyj9LtB 4eHDhCQLcAZUNqz+imFdzItLguvJrpaP79mKfO/UGrvy5J9O/ZU5DTCmbo1bwhkziaPsf2rIIHry 2MPbR0Rxv2jb3aeQFz0= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. SQNG7M0PlpuXmOO2LSvU91pX7XDJbY1LVlbngx4i054fEsLnA1OHLNcmZizrHo7qBRlRQR5wu1M8 ZkspCJXoTXZRkk/9x00U4Ct/Y9xQ50462U4Q5ImQn9boMvC2f/QPJuoKYvUXtJQ2lX33RXJKKPnZ uH4CA5KTsC1lhZU5ypk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bad-dnssec.wb.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 409 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (409 bytes) ;; HEADER SECTION ;; id = 22486 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAab81M78FGdoumvWIYKHGrHraNwgxrXPNJuv45YGDHwA1GghU4Q1Nox42s1GkJ78deXjJBJB 63BIOglWlEGKdG4EGyAOX4BhkjNDTfDTgcMavIY3MutVnaawnODcZu1n0Dhu1G2I4Je05dJP/tAH CQqDbE6lYeRtcbSasAVGMkvL ) ; Key ID = 42919 sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20180314080033 20170314080033 42919 sigexpired.bad-dnssec.wb.sidnlabs.nl. Q6M+gRxyt3H68e0CzJe9VcgTqGNA87iAARZ8DHr8dq+BDS1xFEZiOThsqZA2teRdwksFK1zEmT2/ vHXMXW8OKRlY+rI2R7fMHv1FK5IgIwoEEq180Zh3sCPRlOxOBX4FexzCMwFRn2wH+5oxQNdUgsG4 y4fMhU2XAznLqCzF3OQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone sigexpired.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/NS
	Received 363 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (363 bytes) ;; HEADER SECTION ;; id = 53193 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20180314080033 20170314080033 42919 sigexpired.bad-dnssec.wb.sidnlabs.nl. gFI9fY57nCGC5sZci/UqMjTGMXNHSQqXLI4/VLG+j/jpXoSLOhePrpLLVSMaU6qtpOAnPORtbWzz RROftC3l1ayGGdBv51FfVY6nHrSWcR9CShdLFjvScEHkVzJAf8R0xAz1w+VwuK1d4rmpjtDSIS4B 9w51BF2g2hSAPg6zRo4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found sigexpired.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, yadifa.sidnlabs.nl, bind9.sidnlabs.nl, powerdns.sidnlabs.nl

sigexpired.bad-dnssec.wb.sidnlabs.nl

	Checking DS between bad-dnssec.wb.sidnlabs.nl and sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/DS
	Received 298 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (298 bytes) ;; HEADER SECTION ;; id = 58911 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 42919 8 2 67c2c514a5a917ee56367d289afc88c441e84fefb13ff4baeb1f69ef2a6a06a5 ) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20180314080032 20170314080032 56725 bad-dnssec.wb.sidnlabs.nl. CfV6Tx2js59mQIdW7Yt3eZBCX3T7St9icnMFrnQj8bfNMvCFJhmWeg1mZr4YFTHhIQ4WRdvzera9 Hy04Fn8NVhGOrFkMOrr6LS5T8RRiIlcSfzEWr4JyWX/p4kJMao0p6s1iY9tOiJ6b/lYstGF8pGPN UVGoZvGNEGG1TBPWT34= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for sigexpired.bad-dnssec.wb.sidnlabs.nl in the bad-dnssec.wb.sidnlabs.nl zone
	DS=42919/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20180314080032 20170314080032 56725 bad-dnssec.wb.sidnlabs.nl. CfV6Tx2js59mQIdW7Yt3eZBCX3T7St9icnMFrnQj8bfNMvCFJhmWeg1mZr4YFTHhIQ4WRdvzera9 Hy04Fn8NVhGOrFkMOrr6LS5T8RRiIlcSfzEWr4JyWX/p4kJMao0p6s1iY9tOiJ6b/lYstGF8pGPN UVGoZvGNEGG1TBPWT34= )`
	RRSIG=56725 is expired
	The DS RRset was not signed by any keys in the chain-of-trust
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 42919 8 2 67c2c514a5a917ee56367d289afc88c441e84fefb13ff4baeb1f69ef2a6a06a5 )`
	Query to knot.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 409 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (409 bytes) ;; HEADER SECTION ;; id = 61276 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAab81M78FGdoumvWIYKHGrHraNwgxrXPNJuv45YGDHwA1GghU4Q1Nox42s1GkJ78deXjJBJB 63BIOglWlEGKdG4EGyAOX4BhkjNDTfDTgcMavIY3MutVnaawnODcZu1n0Dhu1G2I4Je05dJP/tAH CQqDbE6lYeRtcbSasAVGMkvL ) ; Key ID = 42919 sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20180314080033 20170314080033 42919 sigexpired.bad-dnssec.wb.sidnlabs.nl. Q6M+gRxyt3H68e0CzJe9VcgTqGNA87iAARZ8DHr8dq+BDS1xFEZiOThsqZA2teRdwksFK1zEmT2/ vHXMXW8OKRlY+rI2R7fMHv1FK5IgIwoEEq180Zh3sCPRlOxOBX4FexzCMwFRn2wH+5oxQNdUgsG4 y4fMhU2XAznLqCzF3OQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for sigexpired.bad-dnssec.wb.sidnlabs.nl
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAab81M78FGdoumvWIYKHGrHraNwgxrXPNJuv45YGDHwA1GghU4Q1Nox42s1GkJ78deXjJBJB 63BIOglWlEGKdG4EGyAOX4BhkjNDTfDTgcMavIY3MutVnaawnODcZu1n0Dhu1G2I4Je05dJP/tAH CQqDbE6lYeRtcbSasAVGMkvL ) ; Key ID = 42919`
	DS=42919/SHA-256 verifies DNSKEY=42919/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20180314080033 20170314080033 42919 sigexpired.bad-dnssec.wb.sidnlabs.nl. Q6M+gRxyt3H68e0CzJe9VcgTqGNA87iAARZ8DHr8dq+BDS1xFEZiOThsqZA2teRdwksFK1zEmT2/ vHXMXW8OKRlY+rI2R7fMHv1FK5IgIwoEEq180Zh3sCPRlOxOBX4FexzCMwFRn2wH+5oxQNdUgsG4 y4fMhU2XAznLqCzF3OQ= )`
	RRSIG=42919 is expired
	None of the 1 RRSIG and 1 DNSKEY records validate the DNSKEY RRset
	Query to powerdns.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (289 bytes) ;; HEADER SECTION ;; id = 61405 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. jEosbAQIdu8hZtJQfq5BfVrjLoHOVQ6a58luUlWx7oMCyFEtY9xwVGnqAMDvXt3lKyXEwDyj9LtB 4eHDhCQLcAZUNqz+imFdzItLguvJrpaP79mKfO/UGrvy5J9O/ZU5DTCmbo1bwhkziaPsf2rIIHry 2MPbR0Rxv2jb3aeQFz0= ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	sigexpired.bad-dnssec.wb.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 415 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (415 bytes) ;; HEADER SECTION ;; id = 28549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcPoWkDBdIiynwEnIAIHUIsvsg2908kpmTANBYKkJULaX259DWKS1m3cPUcKLJyx9vaN64aS qVm8rmDEumtWZN0QQIE50swgabxpCVV0Edy21QeMv4bAXUEIKAI6hy46ykq8/Mp2s4hzCPd2ichL j0OA1VXdtbeb6OtcN7Ebsl3L ) ; Key ID = 39049 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20190314080033 39049 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. oKtrc0fldJ0bURXeNtys7+ymLlrw3laad9gHB4lNzuFKXzIppWnOu6HIC0AxbjLT1KXYVOK1fY8N 0vc3P48CfSBBMPxiNtcNsR2WhB0eyZyEPr/RfFbIV4mRj/0Omc0Z+X/NUVgP2GlKtC/zlM2JnI4u AYX5YIdB5aK64WIRFxA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/NS
	Received 369 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (369 bytes) ;; HEADER SECTION ;; id = 50421 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 6 3600 20300101000000 20190314080033 39049 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. ZOi55+TdZzr4f1GxloUOwGWonqqx1NBH8r2b9ZuNg6qUWNNq3t8wIAPLoR/ij32hOKPLE8HvdWWy I0VpzEtxZXoqytvow5lFpuiZ2EHH/mS6tJNRug2rw6ZNllX+OINLsplaxYq7sL8UHiM0LvpVr9I6 mOjpLlFc3AkgUwpFYYo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found ok.sigexpired.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

	Checking DS between sigexpired.bad-dnssec.wb.sidnlabs.nl and ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DS
	Received 312 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (312 bytes) ;; HEADER SECTION ;; id = 22822 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 39049 8 2 c157ae41c12659d6caf67630e521688174d65cc15b8768238c17d04fff173fe6 ) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20190314080033 42919 sigexpired.bad-dnssec.wb.sidnlabs.nl. EBvjorKfwSpjfHS6s2RETlBIU8iFf/f+mIwkwsSmF1eiE9+NvZvdJeOcaHqpwqvSOCvXQnPeoTWf x0wDR3Ou0rrk6Arz0L3q1HMRMSk93MB63PKFf/EhsKpkOh8/Lvzla1DXqz1z0Soenn7fWLAz4Xnn 3CXz1kuYQ3ynyAhaKt0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl in the sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	DS=39049/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20190314080033 42919 sigexpired.bad-dnssec.wb.sidnlabs.nl. EBvjorKfwSpjfHS6s2RETlBIU8iFf/f+mIwkwsSmF1eiE9+NvZvdJeOcaHqpwqvSOCvXQnPeoTWf x0wDR3Ou0rrk6Arz0L3q1HMRMSk93MB63PKFf/EhsKpkOh8/Lvzla1DXqz1z0Soenn7fWLAz4Xnn 3CXz1kuYQ3ynyAhaKt0= )`
	RRSIG=42919 and DNSKEY=42919/SEP verifies the DS RRset
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 39049 8 2 c157ae41c12659d6caf67630e521688174d65cc15b8768238c17d04fff173fe6 )`
	Query to bind9.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 415 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (415 bytes) ;; HEADER SECTION ;; id = 2442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcPoWkDBdIiynwEnIAIHUIsvsg2908kpmTANBYKkJULaX259DWKS1m3cPUcKLJyx9vaN64aS qVm8rmDEumtWZN0QQIE50swgabxpCVV0Edy21QeMv4bAXUEIKAI6hy46ykq8/Mp2s4hzCPd2ichL j0OA1VXdtbeb6OtcN7Ebsl3L ) ; Key ID = 39049 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20190314080033 39049 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. oKtrc0fldJ0bURXeNtys7+ymLlrw3laad9gHB4lNzuFKXzIppWnOu6HIC0AxbjLT1KXYVOK1fY8N 0vc3P48CfSBBMPxiNtcNsR2WhB0eyZyEPr/RfFbIV4mRj/0Omc0Z+X/NUVgP2GlKtC/zlM2JnI4u AYX5YIdB5aK64WIRFxA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcPoWkDBdIiynwEnIAIHUIsvsg2908kpmTANBYKkJULaX259DWKS1m3cPUcKLJyx9vaN64aS qVm8rmDEumtWZN0QQIE50swgabxpCVV0Edy21QeMv4bAXUEIKAI6hy46ykq8/Mp2s4hzCPd2ichL j0OA1VXdtbeb6OtcN7Ebsl3L ) ; Key ID = 39049`
	DS=39049/SHA-256 verifies DNSKEY=39049/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20190314080033 39049 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. oKtrc0fldJ0bURXeNtys7+ymLlrw3laad9gHB4lNzuFKXzIppWnOu6HIC0AxbjLT1KXYVOK1fY8N 0vc3P48CfSBBMPxiNtcNsR2WhB0eyZyEPr/RfFbIV4mRj/0Omc0Z+X/NUVgP2GlKtC/zlM2JnI4u AYX5YIdB5aK64WIRFxA= )`
	RRSIG=39049 and DNSKEY=39049/SEP verifies the DNSKEY RRset
	Query to knot.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (289 bytes) ;; HEADER SECTION ;; id = 17919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. jEosbAQIdu8hZtJQfq5BfVrjLoHOVQ6a58luUlWx7oMCyFEtY9xwVGnqAMDvXt3lKyXEwDyj9LtB 4eHDhCQLcAZUNqz+imFdzItLguvJrpaP79mKfO/UGrvy5J9O/ZU5DTCmbo1bwhkziaPsf2rIIHry 2MPbR0Rxv2jb3aeQFz0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ok.sigexpired.bad-dnssec.wb.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 421 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (421 bytes) ;; HEADER SECTION ;; id = 28734 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcGpneBIYqt29RUy0OurUhVUXOHS7azrJhf+wcUP2pVreJZc7Wqyu5mCWblzdPqweYRKeL2e jGQy5uEZmaugOZdYH9700By0jr9ORkKKAqPdCmmO/RNzZ2U8nrBNMOT5T7lba+3A/auxdtlpncke bVFNlkOVzKTVX0cfOxCHT4vt ) ; Key ID = 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. Yk5NFORfMcQDNmLS7UA93RnEF2eZ7IwLbn9hWENm4Fzh/2o7N8IywtbEoVL1dlDWk1QF/rbu4IsE AKnpLTwXpONxg9DSXv2W00zAcWKiRWen8lX6PDpunUwGeaEV9dBuLaWxMiZxBt+Y1uc/X4a9qGZM 2PsbKuM6T3hDXq1MjVI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/NS
	Received 375 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (375 bytes) ;; HEADER SECTION ;; id = 5102 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. SQNG7M0PlpuXmOO2LSvU91pX7XDJbY1LVlbngx4i054fEsLnA1OHLNcmZizrHo7qBRlRQR5wu1M8 ZkspCJXoTXZRkk/9x00U4Ct/Y9xQ50462U4Q5ImQn9boMvC2f/QPJuoKYvUXtJQ2lX33RXJKKPnZ uH4CA5KTsC1lhZU5ypk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

	Checking DS between ok.sigexpired.bad-dnssec.wb.sidnlabs.nl and ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DS
	Received 318 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (318 bytes) ;; HEADER SECTION ;; id = 10247 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 7354 8 2 8665d7cc8823f36efb5edbcd5f6291c7dc7606fbb1c7645e610db32d2de45985 ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20190314080033 39049 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. UABNM7bOaKThn5dnq/2FTMjDRpbkHZSmLz9xXhU/FCK3Ahl1/w8cJQAUj3RniA0L20EuLQlbMful s41ojfI2S7cbfX1JrQM09FDyIBAdSSvTeE0vd/yFJq4FrFiXMn/SjueA+nXZsS60bVsFkliXbvmy iPvZig9QMjZhcWs48yE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl in the ok.sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	DS=7354/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20190314080033 39049 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. UABNM7bOaKThn5dnq/2FTMjDRpbkHZSmLz9xXhU/FCK3Ahl1/w8cJQAUj3RniA0L20EuLQlbMful s41ojfI2S7cbfX1JrQM09FDyIBAdSSvTeE0vd/yFJq4FrFiXMn/SjueA+nXZsS60bVsFkliXbvmy iPvZig9QMjZhcWs48yE= )`
	RRSIG=39049 and DNSKEY=39049/SEP verifies the DS RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 7354 8 2 8665d7cc8823f36efb5edbcd5f6291c7dc7606fbb1c7645e610db32d2de45985 )`
	Query to knot.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 421 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (421 bytes) ;; HEADER SECTION ;; id = 24560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcGpneBIYqt29RUy0OurUhVUXOHS7azrJhf+wcUP2pVreJZc7Wqyu5mCWblzdPqweYRKeL2e jGQy5uEZmaugOZdYH9700By0jr9ORkKKAqPdCmmO/RNzZ2U8nrBNMOT5T7lba+3A/auxdtlpncke bVFNlkOVzKTVX0cfOxCHT4vt ) ; Key ID = 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. Yk5NFORfMcQDNmLS7UA93RnEF2eZ7IwLbn9hWENm4Fzh/2o7N8IywtbEoVL1dlDWk1QF/rbu4IsE AKnpLTwXpONxg9DSXv2W00zAcWKiRWen8lX6PDpunUwGeaEV9dBuLaWxMiZxBt+Y1uc/X4a9qGZM 2PsbKuM6T3hDXq1MjVI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcGpneBIYqt29RUy0OurUhVUXOHS7azrJhf+wcUP2pVreJZc7Wqyu5mCWblzdPqweYRKeL2e jGQy5uEZmaugOZdYH9700By0jr9ORkKKAqPdCmmO/RNzZ2U8nrBNMOT5T7lba+3A/auxdtlpncke bVFNlkOVzKTVX0cfOxCHT4vt ) ; Key ID = 7354`
	DS=7354/SHA-256 verifies DNSKEY=7354/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. Yk5NFORfMcQDNmLS7UA93RnEF2eZ7IwLbn9hWENm4Fzh/2o7N8IywtbEoVL1dlDWk1QF/rbu4IsE AKnpLTwXpONxg9DSXv2W00zAcWKiRWen8lX6PDpunUwGeaEV9dBuLaWxMiZxBt+Y1uc/X4a9qGZM 2PsbKuM6T3hDXq1MjVI= )`
	RRSIG=7354 and DNSKEY=7354/SEP verifies the DNSKEY RRset
	Query to yadifa.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 593 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (593 bytes) ;; HEADER SECTION ;; id = 37228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. jEosbAQIdu8hZtJQfq5BfVrjLoHOVQ6a58luUlWx7oMCyFEtY9xwVGnqAMDvXt3lKyXEwDyj9LtB 4eHDhCQLcAZUNqz+imFdzItLguvJrpaP79mKfO/UGrvy5J9O/ZU5DTCmbo1bwhkziaPsf2rIIHry 2MPbR0Rxv2jb3aeQFz0= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. SQNG7M0PlpuXmOO2LSvU91pX7XDJbY1LVlbngx4i054fEsLnA1OHLNcmZizrHo7qBRlRQR5wu1M8 ZkspCJXoTXZRkk/9x00U4Ct/Y9xQ50462U4Q5ImQn9boMvC2f/QPJuoKYvUXtJQ2lX33RXJKKPnZ uH4CA5KTsC1lhZU5ypk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 326 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (326 bytes) ;; HEADER SECTION ;; id = 35078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. dCT1bohrv4y+KYXMgVQGHvopHKwW+SDQtP8ayEY0OYaywWZNWn2SpkZBQvQtgxdS7Ds/OQRWMmwd 0E6QDo3AXTfjiKtvw+Hec7uZN9A7u2W/Dp+X7+LwAiWGQGGRLrVTgQRvWrvIhUFGzBoQC39bzaGf 3WZZmx9Fx8jiR0bkgO0= ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550430 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 624 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (624 bytes) ;; HEADER SECTION ;; id = 61641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550430 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. dCT1bohrv4y+KYXMgVQGHvopHKwW+SDQtP8ayEY0OYaywWZNWn2SpkZBQvQtgxdS7Ds/OQRWMmwd 0E6QDo3AXTfjiKtvw+Hec7uZN9A7u2W/Dp+X7+LwAiWGQGGRLrVTgQRvWrvIhUFGzBoQC39bzaGf 3WZZmx9Fx8jiR0bkgO0= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. SQNG7M0PlpuXmOO2LSvU91pX7XDJbY1LVlbngx4i054fEsLnA1OHLNcmZizrHo7qBRlRQR5wu1M8 ZkspCJXoTXZRkk/9x00U4Ct/Y9xQ50462U4Q5ImQn9boMvC2f/QPJuoKYvUXtJQ2lX33RXJKKPnZ uH4CA5KTsC1lhZU5ypk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to yadifa.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 624 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (624 bytes) ;; HEADER SECTION ;; id = 60100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550430 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. dCT1bohrv4y+KYXMgVQGHvopHKwW+SDQtP8ayEY0OYaywWZNWn2SpkZBQvQtgxdS7Ds/OQRWMmwd 0E6QDo3AXTfjiKtvw+Hec7uZN9A7u2W/Dp+X7+LwAiWGQGGRLrVTgQRvWrvIhUFGzBoQC39bzaGf 3WZZmx9Fx8jiR0bkgO0= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. SQNG7M0PlpuXmOO2LSvU91pX7XDJbY1LVlbngx4i054fEsLnA1OHLNcmZizrHo7qBRlRQR5wu1M8 ZkspCJXoTXZRkk/9x00U4Ct/Y9xQ50462U4Q5ImQn9boMvC2f/QPJuoKYvUXtJQ2lX33RXJKKPnZ uH4CA5KTsC1lhZU5ypk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to bind9.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 624 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (624 bytes) ;; HEADER SECTION ;; id = 28901 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550430 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. dCT1bohrv4y+KYXMgVQGHvopHKwW+SDQtP8ayEY0OYaywWZNWn2SpkZBQvQtgxdS7Ds/OQRWMmwd 0E6QDo3AXTfjiKtvw+Hec7uZN9A7u2W/Dp+X7+LwAiWGQGGRLrVTgQRvWrvIhUFGzBoQC39bzaGf 3WZZmx9Fx8jiR0bkgO0= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. SQNG7M0PlpuXmOO2LSvU91pX7XDJbY1LVlbngx4i054fEsLnA1OHLNcmZizrHo7qBRlRQR5wu1M8 ZkspCJXoTXZRkk/9x00U4Ct/Y9xQ50462U4Q5ImQn9boMvC2f/QPJuoKYvUXtJQ2lX33RXJKKPnZ uH4CA5KTsC1lhZU5ypk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to knot.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 326 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (326 bytes) ;; HEADER SECTION ;; id = 54215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550430 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. dCT1bohrv4y+KYXMgVQGHvopHKwW+SDQtP8ayEY0OYaywWZNWn2SpkZBQvQtgxdS7Ds/OQRWMmwd 0E6QDo3AXTfjiKtvw+Hec7uZN9A7u2W/Dp+X7+LwAiWGQGGRLrVTgQRvWrvIhUFGzBoQC39bzaGf 3WZZmx9Fx8jiR0bkgO0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to yadifa.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 593 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (593 bytes) ;; HEADER SECTION ;; id = 3468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. jEosbAQIdu8hZtJQfq5BfVrjLoHOVQ6a58luUlWx7oMCyFEtY9xwVGnqAMDvXt3lKyXEwDyj9LtB 4eHDhCQLcAZUNqz+imFdzItLguvJrpaP79mKfO/UGrvy5J9O/ZU5DTCmbo1bwhkziaPsf2rIIHry 2MPbR0Rxv2jb3aeQFz0= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. SQNG7M0PlpuXmOO2LSvU91pX7XDJbY1LVlbngx4i054fEsLnA1OHLNcmZizrHo7qBRlRQR5wu1M8 ZkspCJXoTXZRkk/9x00U4Ct/Y9xQ50462U4Q5ImQn9boMvC2f/QPJuoKYvUXtJQ2lX33RXJKKPnZ uH4CA5KTsC1lhZU5ypk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20190314080033 7354 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. jEosbAQIdu8hZtJQfq5BfVrjLoHOVQ6a58luUlWx7oMCyFEtY9xwVGnqAMDvXt3lKyXEwDyj9LtB 4eHDhCQLcAZUNqz+imFdzItLguvJrpaP79mKfO/UGrvy5J9O/ZU5DTCmbo1bwhkziaPsf2rIIHry 2MPbR0Rxv2jb3aeQFz0= )`
	RRSIG=7354 and DNSKEY=7354/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: