Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2022-12-04 19:18:01 UTC, NTP stratum 16

Analyzing DNSSEC problems for tniad.mil.id

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
id
Found 1 DS records for id in the . zone
DS=26887/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
Found 2 DNSKEY records for id
DS=26887/SHA-256 verifies DNSKEY=26887/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=22449 and DNSKEY=22449 verifies the DNSKEY RRset
mil.id
Found 1 DS records for mil.id in the id zone
DS=27192/SHA-256 has algorithm RSASHA512
Found 1 RRSIGs over DS RRset
RRSIG=22449 and DNSKEY=22449 verifies the DS RRset
Found 2 DNSKEY records for mil.id
DS=27192/SHA-256 verifies DNSKEY=27192/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=23342 and DNSKEY=23342 verifies the DNSKEY RRset
tniad.mil.id
Found 1 DS records for tniad.mil.id in the mil.id zone
DS=47259/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=23342 and DNSKEY=23342 verifies the DS RRset
Found 2 DNSKEY records for tniad.mil.id
DS=47259/SHA-256 verifies DNSKEY=47259/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=47259 is expired
RRSIG=58974 is expired
None of the 2 RRSIG and 2 DNSKEY records validate the DNSKEY RRset
The DNSKEY RRset was not signed by any trusted keys
mx.tniad.mil.id is authoritative for tniad.mil.id
tniad.mil.id A RR has value 103.112.223.121
Found 1 RRSIGs over A RRset
None of the 1 RRSIG and 2 DNSKEY records validate the A RRset
tniad.mil.id
nx.tniad.mil.id is authoritative for tniad.mil.id
tniad.mil.id A RR has value 103.112.223.121
Found 1 RRSIGs over A RRset
RRSIG=58974 is expired
None of the 1 RRSIG and 2 DNSKEY records validate the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test tniad.mil.id at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options