DNSSEC Analyzer - ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

Domain Name:

Time: 2022-09-27 02:38:28 UTC, NTP stratum 16

Analyzing DNSSEC problems for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (1139 octets) ;; HEADER SECTION ;; id = 46607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221010000000 20220919000000 20326 . VnZZAvbJE/EHjG1t5yiq1Ups3AUraCCE1d+f6aE/YxZdnnMnTIboegeJNT1k1A081WJPbF526O+R SIRxiWXc1t0vwUa9M/gAUYx6D1eF5htBIX4fuxLc/J0YvizQcRBx2q4xzHoEohF+RDmhX7nNHtT4 kt0PcuIt4O4rVp6cF/k2heHF/AY9rMd9jz+MIiPpPkEoaPOZESZnpaQU92pFnN4tp/d2xCCay7ye /q3oq5CGa8PgpLpTVJWOAvFyC1vCUoir0v3tgDv4U2OalU9C5jOEFGOp4mx3thQQ/ya9Yxffdvd7 +yd2MNh+O4Ov/rmpGuA84fWau3oOveHuFE9RMw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221010000000 20220919000000 20326 . VnZZAvbJE/EHjG1t5yiq1Ups3AUraCCE1d+f6aE/YxZdnnMnTIboegeJNT1k1A081WJPbF526O+R SIRxiWXc1t0vwUa9M/gAUYx6D1eF5htBIX4fuxLc/J0YvizQcRBx2q4xzHoEohF+RDmhX7nNHtT4 kt0PcuIt4O4rVp6cF/k2heHF/AY9rMd9jz+MIiPpPkEoaPOZESZnpaQU92pFnN4tp/d2xCCay7ye /q3oq5CGa8PgpLpTVJWOAvFyC1vCUoir0v3tgDv4U2OalU9C5jOEFGOp4mx3thQQ/ya9Yxffdvd7 +yd2MNh+O4Ov/rmpGuA84fWau3oOveHuFE9RMw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	DNSKEY=20826 is now in the chain-of-trust
	Query to g.root-servers.net for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 662 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (662 octets) ;; HEADER SECTION ;; id = 27500 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20221009180000 20220926170000 20826 . B1MV5p2WvTIWWvxuo1va4KLuhS5wffcOPVe7ai+0cCEApW6jZvpsJUH9VHANkI5OB+Aktp8nYqFZ A8r0SZB+VVTy7h0qELAXgmsTpH9SaWCnEiHJKILF2OTXzd8Qp7ZHle/ymlxSAXtYqNd/hfVfum+m uZ0yBEorilpuTx/QxU7E/VemvwIJVr9ubhGJ2F+18TMk7x9khsZYOJsmTTuxmqsH6NGpPhVdGKZ/ y4H7Jm+ElXLXCdjD4msj+nhxTPxoqbRF1RuaxpM0Y1m+nFBW/NWIdeMEb/obKjCyP12yTIIbbXzM UewfeuvvuU9qjhfcoTeYdPdvtKkYBTNkCoSEEg== ) ;; ADDITIONAL SECTION (9 records) ns4.dns.nl. 172800 IN A 185.159.199.200 ns3.dns.nl. 172800 IN A 194.0.25.24 ns2.dns.nl. 172800 IN A 194.146.106.42 ns1.dns.nl. 172800 IN A 194.0.28.53 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to m.root-servers.net for nl/DNSKEY
	Received 620 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (620 octets) ;; HEADER SECTION ;; id = 39938 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20221009180000 20220926170000 20826 . B1MV5p2WvTIWWvxuo1va4KLuhS5wffcOPVe7ai+0cCEApW6jZvpsJUH9VHANkI5OB+Aktp8nYqFZ A8r0SZB+VVTy7h0qELAXgmsTpH9SaWCnEiHJKILF2OTXzd8Qp7ZHle/ymlxSAXtYqNd/hfVfum+m uZ0yBEorilpuTx/QxU7E/VemvwIJVr9ubhGJ2F+18TMk7x9khsZYOJsmTTuxmqsH6NGpPhVdGKZ/ y4H7Jm+ElXLXCdjD4msj+nhxTPxoqbRF1RuaxpM0Y1m+nFBW/NWIdeMEb/obKjCyP12yTIIbbXzM UewfeuvvuU9qjhfcoTeYdPdvtKkYBTNkCoSEEg== ) ;; ADDITIONAL SECTION (9 records) ns4.dns.nl. 172800 IN A 185.159.199.200 ns3.dns.nl. 172800 IN A 194.0.25.24 ns2.dns.nl. 172800 IN A 194.146.106.42 ns1.dns.nl. 172800 IN A 194.0.28.53 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to h.root-servers.net for nl/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (366 octets) ;; HEADER SECTION ;; id = 60597 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20221009180000 20220926170000 20826 . B1MV5p2WvTIWWvxuo1va4KLuhS5wffcOPVe7ai+0cCEApW6jZvpsJUH9VHANkI5OB+Aktp8nYqFZ A8r0SZB+VVTy7h0qELAXgmsTpH9SaWCnEiHJKILF2OTXzd8Qp7ZHle/ymlxSAXtYqNd/hfVfum+m uZ0yBEorilpuTx/QxU7E/VemvwIJVr9ubhGJ2F+18TMk7x9khsZYOJsmTTuxmqsH6NGpPhVdGKZ/ y4H7Jm+ElXLXCdjD4msj+nhxTPxoqbRF1RuaxpM0Y1m+nFBW/NWIdeMEb/obKjCyP12yTIIbbXzM UewfeuvvuU9qjhfcoTeYdPdvtKkYBTNkCoSEEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20221009180000 20220926170000 20826 . B1MV5p2WvTIWWvxuo1va4KLuhS5wffcOPVe7ai+0cCEApW6jZvpsJUH9VHANkI5OB+Aktp8nYqFZ A8r0SZB+VVTy7h0qELAXgmsTpH9SaWCnEiHJKILF2OTXzd8Qp7ZHle/ymlxSAXtYqNd/hfVfum+m uZ0yBEorilpuTx/QxU7E/VemvwIJVr9ubhGJ2F+18TMk7x9khsZYOJsmTTuxmqsH6NGpPhVdGKZ/ y4H7Jm+ElXLXCdjD4msj+nhxTPxoqbRF1RuaxpM0Y1m+nFBW/NWIdeMEb/obKjCyP12yTIIbbXzM UewfeuvvuU9qjhfcoTeYdPdvtKkYBTNkCoSEEg== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns3.dns.nl for nl/DNSKEY
	Received 745 bytes from 194.0.25.24
	;; Response received from 194.0.25.24 (745 octets) ;; HEADER SECTION ;; id = 6150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 8 AwEAAaMqlAUdcGCR0epck8ysH0mCyzTnPgOwxp42KkroCB1S/ot9jZXhbyTPDcNE59kwGK4WIujk 9wszIA0a91/FHXtyA4m7NtnJIn1fu5dMkWjAAqOLwr6n2MUBX18VYcZUnsmYCzGmg8aN+5BXxny9 uT5iqOc/yVuh0REaDz40HSOF ) ; Key ID = 3786 nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20221005100139 20220921040735 34112 nl. WXquQodg1NrIxCKOnlZXh5hG7C0JqFK7+5ci9NCfDHNFBMHYSRox8s54ZS9SNPQDGP3+T88ZjUAE wn7ZeNcKELQdn3IsVOUqVRyvDXJrQ4+VK/4o6WjAGJeZmad5M9XiPnbPSK4KlyD/MBHckpJ9Xd3h Jl23gbOgJmq5N/Fb5a45B035nz1CmPGNQtP1DJ1Z9RYITTJhN+4s+C974qvXRvaTxtRyHsE1ayYY nznHYRr/jDyD4RN0yEEjEaKfDIkqbK/tXZAw1GV5GfBYPVlN5jqXNKF0R2+fkvhyJgOUJ+0GOnnN DI3FNCocs8LGuRzwLjmemub0IQOU9JO+Wr+6+Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAaMqlAUdcGCR0epck8ysH0mCyzTnPgOwxp42KkroCB1S/ot9jZXhbyTPDcNE59kwGK4WIujk 9wszIA0a91/FHXtyA4m7NtnJIn1fu5dMkWjAAqOLwr6n2MUBX18VYcZUnsmYCzGmg8aN+5BXxny9 uT5iqOc/yVuh0REaDz40HSOF ) ; Key ID = 3786`
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20221005100139 20220921040735 34112 nl. WXquQodg1NrIxCKOnlZXh5hG7C0JqFK7+5ci9NCfDHNFBMHYSRox8s54ZS9SNPQDGP3+T88ZjUAE wn7ZeNcKELQdn3IsVOUqVRyvDXJrQ4+VK/4o6WjAGJeZmad5M9XiPnbPSK4KlyD/MBHckpJ9Xd3h Jl23gbOgJmq5N/Fb5a45B035nz1CmPGNQtP1DJ1Z9RYITTJhN+4s+C974qvXRvaTxtRyHsE1ayYY nznHYRr/jDyD4RN0yEEjEaKfDIkqbK/tXZAw1GV5GfBYPVlN5jqXNKF0R2+fkvhyJgOUJ+0GOnnN DI3FNCocs8LGuRzwLjmemub0IQOU9JO+Wr+6+Q== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=3786 is now in the chain-of-trust
	Query to ns2.dns.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 485 bytes from 194.146.106.42
	;; Response received from 194.146.106.42 (485 octets) ;; HEADER SECTION ;; id = 15384 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns3.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20221007174157 20220923133830 3786 nl. Jb/O0ByhvH8vp46siEHdfbICD8VB1UE19NIC4fywpBH3a2jwrlLM43wJ3Jegc3L/uxjbUodA6ixw 60ZhcITuQLylNgELhNPLWtXjFhUgTg1K61xj4Cgu4MlK1ElZWKidw3RQkV1Rq8CB2lpYIS6L1q5s s4nWMHsGgV/Y7Mt57Xk= ) ;; ADDITIONAL SECTION (7 records) ns5.sidn.nl. 3600 IN A 145.40.68.55 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.dns.nl for sidnlabs.nl/DNSKEY
	Received 443 bytes from 194.146.106.42
	;; Response received from 194.146.106.42 (443 octets) ;; HEADER SECTION ;; id = 47535 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN NS ns3.sidn.nl. sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20221007174157 20220923133830 3786 nl. Jb/O0ByhvH8vp46siEHdfbICD8VB1UE19NIC4fywpBH3a2jwrlLM43wJ3Jegc3L/uxjbUodA6ixw 60ZhcITuQLylNgELhNPLWtXjFhUgTg1K61xj4Cgu4MlK1ElZWKidw3RQkV1Rq8CB2lpYIS6L1q5s s4nWMHsGgV/Y7Mt57Xk= ) ;; ADDITIONAL SECTION (7 records) ns5.sidn.nl. 3600 IN A 145.40.68.55 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns3.dns.nl for sidnlabs.nl/DS
	Received 250 bytes from 194.0.25.24
	;; Response received from 194.0.25.24 (250 octets) ;; HEADER SECTION ;; id = 63228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20221007174157 20220923133830 3786 nl. Jb/O0ByhvH8vp46siEHdfbICD8VB1UE19NIC4fywpBH3a2jwrlLM43wJ3Jegc3L/uxjbUodA6ixw 60ZhcITuQLylNgELhNPLWtXjFhUgTg1K61xj4Cgu4MlK1ElZWKidw3RQkV1Rq8CB2lpYIS6L1q5s s4nWMHsGgV/Y7Mt57Xk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=52720/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20221007174157 20220923133830 3786 nl. Jb/O0ByhvH8vp46siEHdfbICD8VB1UE19NIC4fywpBH3a2jwrlLM43wJ3Jegc3L/uxjbUodA6ixw 60ZhcITuQLylNgELhNPLWtXjFhUgTg1K61xj4Cgu4MlK1ElZWKidw3RQkV1Rq8CB2lpYIS6L1q5s s4nWMHsGgV/Y7Mt57Xk= )`
	RRSIG=3786 and DNSKEY=3786 verifies the DS RRset
	DS=52720/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df )`
	Query to ns5.sidn.nl for sidnlabs.nl/DNSKEY
	Received 763 bytes from 145.40.68.55
	;; Response received from 145.40.68.55 (763 octets) ;; HEADER SECTION ;; id = 9199 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853 sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20221011015132 20220911005752 52720 sidnlabs.nl. Gf+6BBOUPZUiqvmckoMP7slP2NmnL3ZCzO6U8wB8K6mg29oRxa1foLEoFc8zCUOQEqR6SmM7DI7W DKFfHFeqWBZEVIvZlgJ8tkB4oiC3o1FZR8imoi3JqW9oU6dXDUrxREPHXawakY3QvQ/eOLpyyHiu zKLCQb2DuNxQ+FYKZmVdh8546hQ76zngrbWQnE4XGg8cH1HY8WVuTcLvAURNgNfF6qnfLzo9Sk1w DfmoqO/VYYxpOzFFBdXewaOw/J/DNUKvZvJ8d42lxUx74DEY+SK+Z3wutwX6uxY8+97AlYjODr32 j2fnh6VILySu8l3LPUq1VUbPVReADY+a+YiiIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853`
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720`
	DNSKEY=52720/SEP is now in the chain-of-trust
	DS=52720/SHA-256 verifies DNSKEY=52720/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20221011015132 20220911005752 52720 sidnlabs.nl. Gf+6BBOUPZUiqvmckoMP7slP2NmnL3ZCzO6U8wB8K6mg29oRxa1foLEoFc8zCUOQEqR6SmM7DI7W DKFfHFeqWBZEVIvZlgJ8tkB4oiC3o1FZR8imoi3JqW9oU6dXDUrxREPHXawakY3QvQ/eOLpyyHiu zKLCQb2DuNxQ+FYKZmVdh8546hQ76zngrbWQnE4XGg8cH1HY8WVuTcLvAURNgNfF6qnfLzo9Sk1w DfmoqO/VYYxpOzFFBdXewaOw/J/DNUKvZvJ8d42lxUx74DEY+SK+Z3wutwX6uxY8+97AlYjODr32 j2fnh6VILySu8l3LPUq1VUbPVReADY+a+YiiIg== )`
	RRSIG=52720 and DNSKEY=52720/SEP verifies the DNSKEY RRset
	DNSKEY=20853 is now in the chain-of-trust
	Query to ns1.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 406 bytes from 94.198.159.8
	;; Response received from 94.198.159.8 (406 octets) ;; HEADER SECTION ;; id = 29523 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20221010053509 20220910045657 20853 sidnlabs.nl. K6+ahGhDIbsrfg1iZhVmb3pid5+8jDIIj+jv/LPBPrEF96z6IQn0N71PbdcI2KH+S+rv9VlCTaSQ X+JpZdnSuMEgjz6ecqZEPvrPFSyJsLPK1Mlx4ABdWjVhNj109LCSSEE4umMrnTG19JWjpEoAvVtX Ob9iGLlklBZqrRnNXAg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.sidn.nl for wb.sidnlabs.nl/DNSKEY
	Received 1097 bytes from 194.0.30.2
	;; Response received from 194.0.30.2 (1097 octets) ;; HEADER SECTION ;; id = 29598 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 14 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20221010053509 20220910045657 20853 sidnlabs.nl. K6+ahGhDIbsrfg1iZhVmb3pid5+8jDIIj+jv/LPBPrEF96z6IQn0N71PbdcI2KH+S+rv9VlCTaSQ X+JpZdnSuMEgjz6ecqZEPvrPFSyJsLPK1Mlx4ABdWjVhNj109LCSSEE4umMrnTG19JWjpEoAvVtX Ob9iGLlklBZqrRnNXAg= ) ;; ADDITIONAL SECTION (14 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20221007004107 20220907001013 20853 sidnlabs.nl. L2SdoRgjbEtMp9znaHSHKOe2sOx4vvlQCavmKkjqSThXOC9OIVFU5/Ew6VjxX4pCpTFkwNpgN7Yu +bWEw7mEO829EOSU06ahgbzNUK0E7eyMTHx2mLrsiSCv8R31DSTV8J53pNTymN8kCdgX4SPVObli HKQwA/YrNrb3mRohArc= ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 8 3 3600 20221007004107 20220907001013 20853 sidnlabs.nl. zUEMEQ62SOI+ImuuFaUV5Zwu6NHyjq06al8ycoRaevvcSOMKGbP8q3tjSVEIlSxkGoNxxyMwbWKo oPAFmUjWDzrAMYTSIezncIV8SbuG1+IMz+c75a8LmzCjPK7vqRpmhKQcTKJ5lcMTw/1nHH7AWNOY KLfVjdKSzn7CPGb3Ycs= ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 8 3 3600 20221026201307 20220926195107 20853 sidnlabs.nl. ZTjwxlDZctTIGhv7SCdxdhiTMdRCQMfHOWJbps6v7TbsGJYdIgttyh6i56m4AzYWBh6hryUzhBL1 qfCWsgow4Fr6oWBV+AAex7vVZwDl4e44qlhUmld0smEoMQHA+zd/QtS8QAgBXNGKv86hflQn7/pc hdiSzI4fAmnjCWiVfoM= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns5.sidn.nl for wb.sidnlabs.nl/DS
	Received 262 bytes from 145.40.68.55
	;; Response received from 145.40.68.55 (262 octets) ;; HEADER SECTION ;; id = 36956 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20221010053509 20220910045657 20853 sidnlabs.nl. K6+ahGhDIbsrfg1iZhVmb3pid5+8jDIIj+jv/LPBPrEF96z6IQn0N71PbdcI2KH+S+rv9VlCTaSQ X+JpZdnSuMEgjz6ecqZEPvrPFSyJsLPK1Mlx4ABdWjVhNj109LCSSEE4umMrnTG19JWjpEoAvVtX Ob9iGLlklBZqrRnNXAg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20221010053509 20220910045657 20853 sidnlabs.nl. K6+ahGhDIbsrfg1iZhVmb3pid5+8jDIIj+jv/LPBPrEF96z6IQn0N71PbdcI2KH+S+rv9VlCTaSQ X+JpZdnSuMEgjz6ecqZEPvrPFSyJsLPK1Mlx4ABdWjVhNj109LCSSEE4umMrnTG19JWjpEoAvVtX Ob9iGLlklBZqrRnNXAg= )`
	RRSIG=20853 and DNSKEY=20853 verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to nsd4.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (897 octets) ;; HEADER SECTION ;; id = 14533 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378 wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 593 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (593 octets) ;; HEADER SECTION ;; id = 22205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nsd4.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (387 octets) ;; HEADER SECTION ;; id = 29767 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/NS
	Received 341 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (341 octets) ;; HEADER SECTION ;; id = 54054 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. i0kgrR1tgaalzyNZq7rza72lr84rLyLeioiUXs9EIKhUQEba8a/nFkFHo9N8mKRjFoHlh/bLIfSB fHlKotKr2TaRlgOBw9OwQyzVbXgWyIK9r1OY5m+rX90XZnMdp2Fxi+JFjdnWGFUXql4ya1YbxbcV xzwYfv+JSEnY3VJ8vCM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found bad-dnssec.wb.sidnlabs.nl nameservers: powerdns.sidnlabs.nl, knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl

bad-dnssec.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DS
	Received 404 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (404 octets) ;; HEADER SECTION ;; id = 18137 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc ) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for bad-dnssec.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=27185/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=27185/SHA-256 is now in the chain-of-trust
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc )`
	Query to bind9.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (387 octets) ;; HEADER SECTION ;; id = 9502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for bad-dnssec.wb.sidnlabs.nl
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185`
	DNSKEY=27185/SEP is now in the chain-of-trust
	DS=27185/SHA-256 verifies DNSKEY=27185/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DNSKEY RRset
	Query to powerdns.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (289 octets) ;; HEADER SECTION ;; id = 22769 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	powerdns.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 409 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (409 octets) ;; HEADER SECTION ;; id = 27920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbVCvU4W98LU5FnLRgZLeM2cvaLoQOZQt7mswwCF91TbmYcl+IGuBCRYGqgAPnKB04T6c6uR 4fiUkMvawrXcFgzIFr8t4ApAVQ6q4TeXLI0mw6aDPSH8f2164TjuHk+kZ27U+l3Bk9dy12cY5Ilb OhPNPjxBaA79/rQ6KMTAK6kH ) ; Key ID = 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. QYdewXl3G+zJREgfMoAviSSg+ZO9M6L4pQ8QOtf1DZfqSAVGlMFIcHwtzWeWN4zq0ugaapM643YR ATMgSykz7uzdMiJ81m3CQQR4jYyNcrX5hPTW3LJUJHcG65Dcm2Ge9jKZVGm5tSGeYGkfPtOUXUA1 0DNjC+aTQOBtE4ianfs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone sigexpired.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/NS
	Received 363 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (363 octets) ;; HEADER SECTION ;; id = 16423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. VovP7sWowv3kgDNOYKtcUyAOcxq5aZAQPfUOAB9YwPLol5Ddpyoj1H3CUDP0TjssWj8kCnMiNSW7 A3o9JW6OFyEpT4wFl0b4FiktuURpeh6aVAoHUdHj9uh14Yfhwb6hrshaUSX5vqSJqf+KKH1dzKVY 8nlUON/MQ6CNjbyz+UU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found sigexpired.bad-dnssec.wb.sidnlabs.nl nameservers: nsd4.sidnlabs.nl, knot.sidnlabs.nl, powerdns.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl

sigexpired.bad-dnssec.wb.sidnlabs.nl

	Checking DS between bad-dnssec.wb.sidnlabs.nl and sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/DS
	Received 298 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (298 octets) ;; HEADER SECTION ;; id = 34709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 61837 8 2 3a3f79f4f6a4fc6e9b5370328200f4e1801d1beb6a9a705543af2cf65c84f330 ) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. jITatYapkCkNKs85b/k3Oz1t6OLeSjMRWCZyPXggdMj/6uw8hg9hwhL7l6Hb8HQPKsBaP07UEalb bEWljleiLMR4mTvQ+bDD6Qmoukaf93AE1Lr4ogaHIpdxbD7jkBQl5GSGQjVh/O1KpVwEgLxEO3v/ D/hs032KprW7vFHav8w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for sigexpired.bad-dnssec.wb.sidnlabs.nl in the bad-dnssec.wb.sidnlabs.nl zone
	DS=61837/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. jITatYapkCkNKs85b/k3Oz1t6OLeSjMRWCZyPXggdMj/6uw8hg9hwhL7l6Hb8HQPKsBaP07UEalb bEWljleiLMR4mTvQ+bDD6Qmoukaf93AE1Lr4ogaHIpdxbD7jkBQl5GSGQjVh/O1KpVwEgLxEO3v/ D/hs032KprW7vFHav8w= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DS RRset
	DS=61837/SHA-256 is now in the chain-of-trust
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 61837 8 2 3a3f79f4f6a4fc6e9b5370328200f4e1801d1beb6a9a705543af2cf65c84f330 )`
	Query to knot.sidnlabs.nl for sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 409 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (409 octets) ;; HEADER SECTION ;; id = 17444 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbVCvU4W98LU5FnLRgZLeM2cvaLoQOZQt7mswwCF91TbmYcl+IGuBCRYGqgAPnKB04T6c6uR 4fiUkMvawrXcFgzIFr8t4ApAVQ6q4TeXLI0mw6aDPSH8f2164TjuHk+kZ27U+l3Bk9dy12cY5Ilb OhPNPjxBaA79/rQ6KMTAK6kH ) ; Key ID = 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. QYdewXl3G+zJREgfMoAviSSg+ZO9M6L4pQ8QOtf1DZfqSAVGlMFIcHwtzWeWN4zq0ugaapM643YR ATMgSykz7uzdMiJ81m3CQQR4jYyNcrX5hPTW3LJUJHcG65Dcm2Ge9jKZVGm5tSGeYGkfPtOUXUA1 0DNjC+aTQOBtE4ianfs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for sigexpired.bad-dnssec.wb.sidnlabs.nl
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbVCvU4W98LU5FnLRgZLeM2cvaLoQOZQt7mswwCF91TbmYcl+IGuBCRYGqgAPnKB04T6c6uR 4fiUkMvawrXcFgzIFr8t4ApAVQ6q4TeXLI0mw6aDPSH8f2164TjuHk+kZ27U+l3Bk9dy12cY5Ilb OhPNPjxBaA79/rQ6KMTAK6kH ) ; Key ID = 61837`
	DNSKEY=61837/SEP is now in the chain-of-trust
	DS=61837/SHA-256 verifies DNSKEY=61837/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. QYdewXl3G+zJREgfMoAviSSg+ZO9M6L4pQ8QOtf1DZfqSAVGlMFIcHwtzWeWN4zq0ugaapM643YR ATMgSykz7uzdMiJ81m3CQQR4jYyNcrX5hPTW3LJUJHcG65Dcm2Ge9jKZVGm5tSGeYGkfPtOUXUA1 0DNjC+aTQOBtE4ianfs= )`
	RRSIG=61837 is expired
	None of the 1 RRSIG and 1 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any trusted keys
	Query to bind9.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 604 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (604 octets) ;; HEADER SECTION ;; id = 29510 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bind9.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 415 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (415 octets) ;; HEADER SECTION ;; id = 1421 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcy79wLGT5aTJ5Ta81a/WYzb0q1z/GOoM9GNC3cN5whSojPpDtPhpoycBPCmhrEtJur8uYwb h0ZHHsBsbDRKbFMtm3at/RyiyD1N+UHJhw0LL9wZNzO6x2+MIhVF3Qx4Ni/JrhZQ1FuyMiD90z9/ cJq1v0M5WhUHEMiD/a5cmCkV ) ; Key ID = 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. K91l30140Bdqq0MB43N6MjKg7MUasjL5OibZNTaYvZxSj5zKo15d/Saih+KSGkD3IVdTDtTEWecz AIQki7lLsa3JDdqzGwTzRYxeyFyA7bi1LVhXduYxvwx4ocb0lZXpcf8Wg2T8wCa5udDREN1PTXb4 B6piVS7yYELqIVzjHlM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/NS
	Received 380 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (380 octets) ;; HEADER SECTION ;; id = 17549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 6 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. HzGDr3EmPLJx9b2yje3XZBNX/oeU8lZut2WIPAmF1JmvqI44jeQAFermY4v2R2CxNdskST0pbYku +tD7JnBdAPO1hcNIwqH8h04PE+3gq2Sk+L3j1A4cuFJoL2bhypP1xxOhx/BzJDV5A2UqIxYmFFSn CNy2aCW5XS2TZl1oM2M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found ok.sigexpired.bad-dnssec.wb.sidnlabs.nl nameservers: nsd4.sidnlabs.nl, yadifa.sidnlabs.nl, bind9.sidnlabs.nl, knot.sidnlabs.nl, powerdns.sidnlabs.nl

ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

	Checking DS between sigexpired.bad-dnssec.wb.sidnlabs.nl and ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DS
	Received 312 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (312 octets) ;; HEADER SECTION ;; id = 12586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 4255 8 2 11f7da18c2bc078a3a18a4fef6a25cc343a49cfd1a06b19c8bebb15cda109d9a ) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. cWrU+/O7wHj5QO8nkZWCyADYWI0YgBpJEi9V6u2EgMo505GZfzQhlnLWEJcm/EYbQMqVM9rKOYI8 cXNtuG+/ZFNFfsGSz1mI95IbLE5ZjBAcSMoOqjuOAQp17Zj+AQqjQjNDweTDxW92BmDnW4RfCmhE ljLK/n0Yw/2Ky+3eSjQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl in the sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	DS=4255/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20191219103316 20181219103316 61837 sigexpired.bad-dnssec.wb.sidnlabs.nl. cWrU+/O7wHj5QO8nkZWCyADYWI0YgBpJEi9V6u2EgMo505GZfzQhlnLWEJcm/EYbQMqVM9rKOYI8 cXNtuG+/ZFNFfsGSz1mI95IbLE5ZjBAcSMoOqjuOAQp17Zj+AQqjQjNDweTDxW92BmDnW4RfCmhE ljLK/n0Yw/2Ky+3eSjQ= )`
	RRSIG=61837 is expired
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 4255 8 2 11f7da18c2bc078a3a18a4fef6a25cc343a49cfd1a06b19c8bebb15cda109d9a )`
	Query to knot.sidnlabs.nl for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 415 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (415 octets) ;; HEADER SECTION ;; id = 53828 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcy79wLGT5aTJ5Ta81a/WYzb0q1z/GOoM9GNC3cN5whSojPpDtPhpoycBPCmhrEtJur8uYwb h0ZHHsBsbDRKbFMtm3at/RyiyD1N+UHJhw0LL9wZNzO6x2+MIhVF3Qx4Ni/JrhZQ1FuyMiD90z9/ cJq1v0M5WhUHEMiD/a5cmCkV ) ; Key ID = 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. K91l30140Bdqq0MB43N6MjKg7MUasjL5OibZNTaYvZxSj5zKo15d/Saih+KSGkD3IVdTDtTEWecz AIQki7lLsa3JDdqzGwTzRYxeyFyA7bi1LVhXduYxvwx4ocb0lZXpcf8Wg2T8wCa5udDREN1PTXb4 B6piVS7yYELqIVzjHlM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcy79wLGT5aTJ5Ta81a/WYzb0q1z/GOoM9GNC3cN5whSojPpDtPhpoycBPCmhrEtJur8uYwb h0ZHHsBsbDRKbFMtm3at/RyiyD1N+UHJhw0LL9wZNzO6x2+MIhVF3Qx4Ni/JrhZQ1FuyMiD90z9/ cJq1v0M5WhUHEMiD/a5cmCkV ) ; Key ID = 4255`
	DS=4255/SHA-256 verifies DNSKEY=4255/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. K91l30140Bdqq0MB43N6MjKg7MUasjL5OibZNTaYvZxSj5zKo15d/Saih+KSGkD3IVdTDtTEWecz AIQki7lLsa3JDdqzGwTzRYxeyFyA7bi1LVhXduYxvwx4ocb0lZXpcf8Wg2T8wCa5udDREN1PTXb4 B6piVS7yYELqIVzjHlM= )`
	RRSIG=4255 and DNSKEY=4255/SEP verifies the DNSKEY RRset
	Query to knot.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (289 octets) ;; HEADER SECTION ;; id = 52977 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	knot.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 421 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (421 octets) ;; HEADER SECTION ;; id = 2771 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcSpz9eE8jAKxxeQd3/CKIM3OI7/X9J9Y19MtTMuMGel2WTwvutZIv+cZnKVBf8nXgRUZOGp ePTmLhYLvjxtsoG+d4IDSD/AUCisDbpF0KQVSWXbBmUuOy91i8LGav3Dn32rgOqF8OeF0kr52J4j OJQYwA0zpoZbkgTvX93ksRmV ) ; Key ID = 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. oX8wF8ZxdfDveghXAOJECmhFK+J4ezOdydJXLMQjg5pNi6CsaIWYM+TrpHJFYCs8/iTs5wpOK7kf xu28H2MCVkM+MdxOiZShUc8JTv/nW9eAb011E+QL2Dc9Mrcr8RVkDpReKZn+N+ut0ar/Cpa04fq3 3KiQIupFEhAUYUTMDUE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/NS
	Received 375 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (375 octets) ;; HEADER SECTION ;; id = 38307 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, powerdns.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl

ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

	Checking DS between ok.sigexpired.bad-dnssec.wb.sidnlabs.nl and ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DS
	Received 318 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (318 octets) ;; HEADER SECTION ;; id = 23392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 4712 8 2 23319fa0c128a1ecccca14cc8067e5d32f822cc9cb3aa231006a1a8559dab182 ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. EMc0I4F/hX7mW/VFBf/W0EhiKTLejMb4xvrD5E2ZshxsWQ1iao60nWBeLXHtRXlO/Wj5tiOta7Gr tjEMekDDDK+nvqIpBRO9geXTQxBztDWX6cUlqSMuqBFqJU0ggQOOJ0XvayexQVM6WENe8bLoAj0a tgigX/Q3UIfB1e2Nv7c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl in the ok.sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	DS=4712/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20201218103316 4255 ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. EMc0I4F/hX7mW/VFBf/W0EhiKTLejMb4xvrD5E2ZshxsWQ1iao60nWBeLXHtRXlO/Wj5tiOta7Gr tjEMekDDDK+nvqIpBRO9geXTQxBztDWX6cUlqSMuqBFqJU0ggQOOJ0XvayexQVM6WENe8bLoAj0a tgigX/Q3UIfB1e2Nv7c= )`
	RRSIG=4255 and DNSKEY=4255/SEP verifies the DS RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 4712 8 2 23319fa0c128a1ecccca14cc8067e5d32f822cc9cb3aa231006a1a8559dab182 )`
	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 421 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (421 octets) ;; HEADER SECTION ;; id = 28398 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcSpz9eE8jAKxxeQd3/CKIM3OI7/X9J9Y19MtTMuMGel2WTwvutZIv+cZnKVBf8nXgRUZOGp ePTmLhYLvjxtsoG+d4IDSD/AUCisDbpF0KQVSWXbBmUuOy91i8LGav3Dn32rgOqF8OeF0kr52J4j OJQYwA0zpoZbkgTvX93ksRmV ) ; Key ID = 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. oX8wF8ZxdfDveghXAOJECmhFK+J4ezOdydJXLMQjg5pNi6CsaIWYM+TrpHJFYCs8/iTs5wpOK7kf xu28H2MCVkM+MdxOiZShUc8JTv/nW9eAb011E+QL2Dc9Mrcr8RVkDpReKZn+N+ut0ar/Cpa04fq3 3KiQIupFEhAUYUTMDUE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcSpz9eE8jAKxxeQd3/CKIM3OI7/X9J9Y19MtTMuMGel2WTwvutZIv+cZnKVBf8nXgRUZOGp ePTmLhYLvjxtsoG+d4IDSD/AUCisDbpF0KQVSWXbBmUuOy91i8LGav3Dn32rgOqF8OeF0kr52J4j OJQYwA0zpoZbkgTvX93ksRmV ) ; Key ID = 4712`
	DS=4712/SHA-256 verifies DNSKEY=4712/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. oX8wF8ZxdfDveghXAOJECmhFK+J4ezOdydJXLMQjg5pNi6CsaIWYM+TrpHJFYCs8/iTs5wpOK7kf xu28H2MCVkM+MdxOiZShUc8JTv/nW9eAb011E+QL2Dc9Mrcr8RVkDpReKZn+N+ut0ar/Cpa04fq3 3KiQIupFEhAUYUTMDUE= )`
	RRSIG=4712 and DNSKEY=4712/SEP verifies the DNSKEY RRset
	Query to bind9.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 604 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (604 octets) ;; HEADER SECTION ;; id = 34488 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bind9.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 326 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (326 octets) ;; HEADER SECTION ;; id = 62966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. s1T+zc4LJn86F/4V8pCeB1+sDcOuZrixFMpQGW0PL+WV2Wp4D5FAWvzu2ff/iA0jnIRet0h+6UPc OLSsoM4UpG5QOu8GJXW81q/k3ut9JrsgJF2WmxCmBe2GwbbpE3Ib3CxuN3vGCSxqojf6Vh6dMgNB hls7h5j3/skAmmemV8U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 624 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (624 octets) ;; HEADER SECTION ;; id = 1498 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. s1T+zc4LJn86F/4V8pCeB1+sDcOuZrixFMpQGW0PL+WV2Wp4D5FAWvzu2ff/iA0jnIRet0h+6UPc OLSsoM4UpG5QOu8GJXW81q/k3ut9JrsgJF2WmxCmBe2GwbbpE3Ib3CxuN3vGCSxqojf6Vh6dMgNB hls7h5j3/skAmmemV8U= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to yadifa.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 326 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (326 octets) ;; HEADER SECTION ;; id = 42871 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. s1T+zc4LJn86F/4V8pCeB1+sDcOuZrixFMpQGW0PL+WV2Wp4D5FAWvzu2ff/iA0jnIRet0h+6UPc OLSsoM4UpG5QOu8GJXW81q/k3ut9JrsgJF2WmxCmBe2GwbbpE3Ib3CxuN3vGCSxqojf6Vh6dMgNB hls7h5j3/skAmmemV8U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to knot.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 326 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (326 octets) ;; HEADER SECTION ;; id = 60635 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287592 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. s1T+zc4LJn86F/4V8pCeB1+sDcOuZrixFMpQGW0PL+WV2Wp4D5FAWvzu2ff/iA0jnIRet0h+6UPc OLSsoM4UpG5QOu8GJXW81q/k3ut9JrsgJF2WmxCmBe2GwbbpE3Ib3CxuN3vGCSxqojf6Vh6dMgNB hls7h5j3/skAmmemV8U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to bind9.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 604 bytes from 94.198.159.39
	;; Response received from 94.198.159.39 (604 octets) ;; HEADER SECTION ;; id = 61969 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= )`
	RRSIG=4712 and DNSKEY=4712/SEP verifies the A RRset

ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

	Query to yadifa.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (289 octets) ;; HEADER SECTION ;; id = 30628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	yadifa.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	Query to yadifa.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.28
	;; Response received from 94.198.159.28 (289 octets) ;; HEADER SECTION ;; id = 39932 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= )`
	RRSIG=4712 and DNSKEY=4712/SEP verifies the A RRset

ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

	Query to knot.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (289 octets) ;; HEADER SECTION ;; id = 23471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	knot.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	Query to knot.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.27
	;; Response received from 94.198.159.27 (289 octets) ;; HEADER SECTION ;; id = 41789 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= )`
	RRSIG=4712 and DNSKEY=4712/SEP verifies the A RRset

ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

	Query to powerdns.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (289 octets) ;; HEADER SECTION ;; id = 15426 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	powerdns.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 289 bytes from 94.198.159.26
	;; Response received from 94.198.159.26 (289 octets) ;; HEADER SECTION ;; id = 52348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= )`
	RRSIG=4712 and DNSKEY=4712/SEP verifies the A RRset

ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl

	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 593 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (593 octets) ;; HEADER SECTION ;; id = 38159 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	nsd4.sidnlabs.nl is authoritative for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl zone
	Query to nsd4.sidnlabs.nl for ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl/A
	Received 593 bytes from 94.198.159.33
	;; Response received from 94.198.159.33 (593 octets) ;; HEADER SECTION ;; id = 63682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= ) ;; AUTHORITY SECTION (6 records) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. XhWICRPzEvJuiNRxN37kuV5MD5Oif4FwLDifoxw7qWrmxCOzcX5bVXmQY3TVtj9mfb1yq4xTv35s nPBMMXOo/um8Z+4Luw+hdy9VeFQul64ZHkO6b4Dz8Mp3W2Y9DOeWv0fxVNOHC/U2Jrd4psCUUTsg z/P7/VdZfZpDFWkL9iE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103316 4712 ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl. eQhljPGtMI4t53AkR5fi+kV2nPlMcOfhyURNW2dcdqxkvH9QdYQvL4bxILTtWIVwK5TfGt8FdFBI wgjBHkpCxDJfSkLoLGEVeqMY87BjNr1ulYa3urwnTZ7Ei12Rxabguu/mjcJoIYUvpjs9UPxROuNH kk3dQbGEs3c9k1rHv0o= )`
	RRSIG=4712 and DNSKEY=4712/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ok.ok.sigexpired.bad-dnssec.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: