DNSViz Home » www.dnssec-failed.org

DNSViz

A DNS visualization tool

www.dnssec-failed.org

Updated: 2012-05-17 10:44:24 UTC (19 hours, 21 minutes ago) Update now
« Previous analysis | Next analysis »
DNSSEC options (show)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Bogus (1)
  • www.dnssec-failed.org/A

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Bogus (2)
  • dnssec-failed.org/DNSKEY (alg 5, id 29521)
  • dnssec-failed.org/DNSKEY (alg 5, id 6060)
Secure (8)
  • ./DNSKEY (alg 8, id 19036)
  • ./DNSKEY (alg 8, id 56158)
  • dnssec-failed.org/DS
  • org/DNSKEY (alg 7, id 12189)
  • org/DNSKEY (alg 7, id 21366)
  • org/DNSKEY (alg 7, id 9795)
  • org/DNSKEY (alg 7, id 9992)
  • org/DS
Non-existent (1)
  • dnssec-failed.org/DNSKEY (alg 5, id 106)

Delegation statusDelegation status

Bogus (1)
  • org to dnssec-failed.org
Secure (1)
  • . to org

NoticesNotices

Errors (1)
  • dnssec-failed.org/DNSKEY: DS RRs exist for algorithm(s) 5 in the org zone, but no matching DNSKEYs of algorithm(s) 5 were used to sign the dnssec-failed.org DNSKEY RRset.
Warnings (2)
  • dnssec-failed.org/DS (alg 5, id 106) digest algs=1,2: The DS RR(s) do not correspond to any DNSKEY in the dnssec-failed.org zone.
  • org/DNSKEY: Unable to retrieve the org/DNSKEY RRset from server(s) 2001:500:e::1.

DNSKEY legend

Full legend
Published onlyPublished only
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Name:dnssec-failed.org
TTL:3600 (1 hour)
RR type:DNSKEY
Flags:257 (ZONE, SEP)
Protocol:3 (DNSSEC)
Algorithm:5 (RSASHA1)
Key length:2048 bits
Key tag:29521
Returned by:2001:558:1002:a:68:87:29:164, 2001:558:1004:7:68:87:85:132, 2001:558:100e:5:68:87:72:244, 2001:558:1014:c:68:87:76:228, 68.87.29.164, 68.87.68.244, 68.87.72.244, 68.87.76.228, 68.87.85.132
Status:bogus

Close

Name:dnssec-failed.org
TTL:86400 (1 day)
RR type:RRSIG
Covers:DS
Algorithm:7 (RSASHA1NSEC3SHA1)
Expiration:2012-05-30 16:01:58 UTC (13 days in the future)
Inception:2012-05-09 15:01:58 UTC (7 days in the past)
Key tag:9992
Signer:org
Signature:correct
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:e::1, 2001:500:f::1
Status:valid

Close

Name:www.dnssec-failed.org
TTL:7200 (2 hours)
RR type:A
Data:68.87.64.48
Returned by:2001:558:1002:a:68:87:29:164, 2001:558:1004:7:68:87:85:132, 2001:558:100e:5:68:87:72:244, 2001:558:1014:c:68:87:76:228, 68.87.29.164, 68.87.68.244, 68.87.72.244, 68.87.76.228, 68.87.85.132
Status:bogus

Close

Name:org
TTL:900 (15 minutes)
RR type:RRSIG
Covers:DNSKEY
Algorithm:7 (RSASHA1NSEC3SHA1)
Expiration:2012-05-30 16:01:58 UTC (13 days in the future)
Inception:2012-05-09 15:01:58 UTC (7 days in the past)
Key tag:9992
Signer:org
Signature:correct
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:f::1
Status:valid

Close

Name:.
TTL:172800 (2 days)
RR type:DNSKEY
Flags:256 (ZONE)
Protocol:3 (DNSSEC)
Algorithm:8 (RSASHA256)
Key length:1024 bits
Key tag:56158
Returned by:128.63.2.53, 128.8.10.90, 192.112.36.4, 192.228.79.201, 192.33.4.12, 192.36.148.17, 192.5.5.241, 192.58.128.30, 193.0.14.129, 198.41.0.4, 199.7.83.42, 2001:500:1::803f:235, 2001:500:2d::d, 2001:500:2f::f, 2001:500:3::42, 2001:503:ba3e::2:30, 2001:503:c27::2:30, 2001:7fd::1, 2001:7fe::53, 2001:dc3::35, 202.12.27.33
Status:secure

Close

Name:.
TTL:172800 (2 days)
RR type:RRSIG
Covers:DNSKEY
Algorithm:8 (RSASHA256)
Expiration:2012-05-25 23:59:59 UTC (8 days in the future)
Inception:2012-05-11 00:00:00 UTC (6 days in the past)
Key tag:19036
Signer:.
Signature:correct
Returned by:128.63.2.53, 128.8.10.90, 192.112.36.4, 192.228.79.201, 192.33.4.12, 192.36.148.17, 192.5.5.241, 192.58.128.30, 193.0.14.129, 198.41.0.4, 199.7.83.42, 2001:500:1::803f:235, 2001:500:2d::d, 2001:500:2f::f, 2001:500:3::42, 2001:503:ba3e::2:30, 2001:503:c27::2:30, 2001:7fd::1, 2001:7fe::53, 2001:dc3::35, 202.12.27.33
Status:valid

Close

Name:org
TTL:86400 (1 day)
RR type:DS
Key tag:21366
Algorithm:7 (RSASHA1NSEC3SHA1)
Digest methods:1,2 (SHA-1,SHA-256)
Returned by:128.63.2.53, 128.8.10.90, 192.112.36.4, 192.228.79.201, 192.33.4.12, 192.36.148.17, 192.5.5.241, 192.58.128.30, 193.0.14.129, 198.41.0.4, 199.7.83.42, 2001:500:1::803f:235, 2001:500:2d::d, 2001:500:2f::f, 2001:500:3::42, 2001:503:ba3e::2:30, 2001:503:c27::2:30, 2001:7fd::1, 2001:7fe::53, 2001:dc3::35, 202.12.27.33
Digest:correct
Status:valid

Close

Name:.
TTL:172800 (2 days)
RR type:RRSIG
Covers:DNSKEY
Algorithm:8 (RSASHA256)
Expiration:2012-05-25 23:59:59 UTC (8 days in the future)
Inception:2012-05-11 00:00:00 UTC (6 days in the past)
Key tag:19036
Signer:.
Signature:correct
Returned by:128.63.2.53, 128.8.10.90, 192.112.36.4, 192.228.79.201, 192.33.4.12, 192.36.148.17, 192.5.5.241, 192.58.128.30, 193.0.14.129, 198.41.0.4, 199.7.83.42, 2001:500:1::803f:235, 2001:500:2d::d, 2001:500:2f::f, 2001:500:3::42, 2001:503:ba3e::2:30, 2001:503:c27::2:30, 2001:7fd::1, 2001:7fe::53, 2001:dc3::35, 202.12.27.33
Status:valid

Close

Name:.
TTL:172800 (2 days)
RR type:DNSKEY
Flags:257 (ZONE, SEP)
Protocol:3 (DNSSEC)
Algorithm:8 (RSASHA256)
Key length:2048 bits
Key tag:19036
Returned by:128.63.2.53, 128.8.10.90, 192.112.36.4, 192.228.79.201, 192.33.4.12, 192.36.148.17, 192.5.5.241, 192.58.128.30, 193.0.14.129, 198.41.0.4, 199.7.83.42, 2001:500:1::803f:235, 2001:500:2d::d, 2001:500:2f::f, 2001:500:3::42, 2001:503:ba3e::2:30, 2001:503:c27::2:30, 2001:7fd::1, 2001:7fe::53, 2001:dc3::35, 202.12.27.33
Status:secure

Close

Name:org
TTL:900 (15 minutes)
RR type:DNSKEY
Flags:256 (ZONE)
Protocol:3 (DNSSEC)
Algorithm:7 (RSASHA1NSEC3SHA1)
Key length:1024 bits
Key tag:9992
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:f::1
Status:secure

Close

Name:org
TTL:86400 (1 day)
RR type:RRSIG
Covers:DS
Algorithm:8 (RSASHA256)
Expiration:2012-05-24 00:00:00 UTC (6 days in the future)
Inception:2012-05-16 23:00:00 UTC (9 hours, 22 minutes in the past)
Key tag:56158
Signer:.
Signature:correct
Returned by:128.63.2.53, 128.8.10.90, 192.112.36.4, 192.228.79.201, 192.33.4.12, 192.36.148.17, 192.5.5.241, 192.58.128.30, 193.0.14.129, 198.41.0.4, 199.7.83.42, 2001:500:1::803f:235, 2001:500:2d::d, 2001:500:2f::f, 2001:500:3::42, 2001:503:ba3e::2:30, 2001:503:c27::2:30, 2001:7fd::1, 2001:7fe::53, 2001:dc3::35, 202.12.27.33
Status:valid

Close

Name:www.dnssec-failed.org
TTL:7200 (2 hours)
RR type:RRSIG
Covers:A
Algorithm:5 (RSASHA1)
Expiration:2012-05-21 18:18:11 UTC (4 days in the future)
Inception:2012-05-14 15:13:11 UTC (2 days in the past)
Key tag:6060
Signer:dnssec-failed.org
Signature:correct
Returned by:2001:558:1002:a:68:87:29:164, 2001:558:1004:7:68:87:85:132, 2001:558:100e:5:68:87:72:244, 2001:558:1014:c:68:87:76:228, 68.87.29.164, 68.87.68.244, 68.87.72.244, 68.87.76.228, 68.87.85.132
Status:valid

Close

Name:org
TTL:900 (15 minutes)
RR type:DNSKEY
Flags:257 (ZONE, SEP)
Protocol:3 (DNSSEC)
Algorithm:7 (RSASHA1NSEC3SHA1)
Key length:2048 bits
Key tag:9795
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:f::1
Status:secure

Close

Name:org
TTL:900 (15 minutes)
RR type:RRSIG
Covers:DNSKEY
Algorithm:7 (RSASHA1NSEC3SHA1)
Expiration:2012-05-30 16:01:58 UTC (13 days in the future)
Inception:2012-05-09 15:01:58 UTC (7 days in the past)
Key tag:21366
Signer:org
Signature:correct
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:f::1
Status:valid

Close

Name:org
TTL:900 (15 minutes)
RR type:DNSKEY
Flags:257 (ZONE, SEP)
Protocol:3 (DNSSEC)
Algorithm:7 (RSASHA1NSEC3SHA1)
Key length:2048 bits
Key tag:21366
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:f::1
Status:secure

Close

Name:dnssec-failed.org
TTL:3600 (1 hour)
RR type:RRSIG
Covers:DNSKEY
Algorithm:5 (RSASHA1)
Expiration:2014-03-02 15:18:11 UTC (654 days in the future)
Inception:2012-03-12 11:18:11 UTC (65 days in the past)
Key tag:29521
Signer:dnssec-failed.org
Signature:correct
Returned by:2001:558:1002:a:68:87:29:164, 2001:558:1004:7:68:87:85:132, 2001:558:100e:5:68:87:72:244, 2001:558:1014:c:68:87:76:228, 68.87.29.164, 68.87.68.244, 68.87.72.244, 68.87.76.228, 68.87.85.132
Status:valid

Close

Name:dnssec-failed.org
TTL:3600 (1 hour)
RR type:RRSIG
Covers:DNSKEY
Algorithm:5 (RSASHA1)
Expiration:2012-05-21 18:18:11 UTC (4 days in the future)
Inception:2012-05-14 15:13:11 UTC (2 days in the past)
Key tag:6060
Signer:dnssec-failed.org
Signature:correct
Returned by:2001:558:1002:a:68:87:29:164, 2001:558:1004:7:68:87:85:132, 2001:558:100e:5:68:87:72:244, 2001:558:1014:c:68:87:76:228, 68.87.29.164, 68.87.68.244, 68.87.72.244, 68.87.76.228, 68.87.85.132
Status:valid

Close

Name:org
TTL:86400 (1 day)
RR type:DS
Key tag:21366
Algorithm:7 (RSASHA1NSEC3SHA1)
Digest methods:1,2 (SHA-1,SHA-256)
Returned by:128.63.2.53, 128.8.10.90, 192.112.36.4, 192.228.79.201, 192.33.4.12, 192.36.148.17, 192.5.5.241, 192.58.128.30, 193.0.14.129, 198.41.0.4, 199.7.83.42, 2001:500:1::803f:235, 2001:500:2d::d, 2001:500:2f::f, 2001:500:3::42, 2001:503:ba3e::2:30, 2001:503:c27::2:30, 2001:7fd::1, 2001:7fe::53, 2001:dc3::35, 202.12.27.33
Status:secure

Close

Name:dnssec-failed.org
TTL:3600 (1 hour)
RR type:DNSKEY
Flags:256 (ZONE)
Protocol:3 (DNSSEC)
Algorithm:5 (RSASHA1)
Key length:1024 bits
Key tag:6060
Returned by:2001:558:1002:a:68:87:29:164, 2001:558:1004:7:68:87:85:132, 2001:558:100e:5:68:87:72:244, 2001:558:1014:c:68:87:76:228, 68.87.29.164, 68.87.68.244, 68.87.72.244, 68.87.76.228, 68.87.85.132
Status:bogus

Close

Name:dnssec-failed.org
TTL:3600 (1 hour)
RR type:RRSIG
Covers:DNSKEY
Algorithm:5 (RSASHA1)
Expiration:2014-03-02 15:18:11 UTC (654 days in the future)
Inception:2012-03-12 11:18:11 UTC (65 days in the past)
Key tag:29521
Signer:dnssec-failed.org
Signature:correct
Returned by:2001:558:1002:a:68:87:29:164, 2001:558:1004:7:68:87:85:132, 2001:558:100e:5:68:87:72:244, 2001:558:1014:c:68:87:76:228, 68.87.29.164, 68.87.68.244, 68.87.72.244, 68.87.76.228, 68.87.85.132
Status:valid

Close

Name:org
TTL:900 (15 minutes)
RR type:RRSIG
Covers:DNSKEY
Algorithm:7 (RSASHA1NSEC3SHA1)
Expiration:2012-05-30 16:01:58 UTC (13 days in the future)
Inception:2012-05-09 15:01:58 UTC (7 days in the past)
Key tag:21366
Signer:org
Signature:correct
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:f::1
Status:valid

Close

Name:org
TTL:900 (15 minutes)
RR type:DNSKEY
Flags:256 (ZONE)
Protocol:3 (DNSSEC)
Algorithm:7 (RSASHA1NSEC3SHA1)
Key length:1024 bits
Key tag:12189
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:f::1
Status:secure

Close

Name:org
TTL:900 (15 minutes)
RR type:RRSIG
Covers:DNSKEY
Algorithm:7 (RSASHA1NSEC3SHA1)
Expiration:2012-05-30 16:01:58 UTC (13 days in the future)
Inception:2012-05-09 15:01:58 UTC (7 days in the past)
Key tag:21366
Signer:org
Signature:correct
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:f::1
Status:valid

Close

Name:dnssec-failed.org
TTL:unknown
RR type:DNSKEY
Flags:unknown
Protocol:unknown
Algorithm:5 (RSASHA1)
Key length:unknown
Key tag:106
Status:non-existent

Close

Name:org
TTL:900 (15 minutes)
RR type:RRSIG
Covers:DNSKEY
Algorithm:7 (RSASHA1NSEC3SHA1)
Expiration:2012-05-30 16:01:58 UTC (13 days in the future)
Inception:2012-05-09 15:01:58 UTC (7 days in the past)
Key tag:21366
Signer:org
Signature:correct
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:f::1
Status:valid

Close

Name:dnssec-failed.org
TTL:86400 (1 day)
RR type:DS
Key tag:106
Algorithm:5 (RSASHA1)
Digest methods:1,2 (SHA-1,SHA-256)
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:e::1, 2001:500:f::1
Digest:unknown
Status:unknown: The DS RR(s) do not correspond to any DNSKEY in the dnssec-failed.org zone.

Close

Name:dnssec-failed.org
TTL:86400 (1 day)
RR type:DS
Key tag:106
Algorithm:5 (RSASHA1)
Digest methods:1,2 (SHA-1,SHA-256)
Returned by:199.19.53.1, 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.112.1, 199.249.120.1, 2001:500:40::1, 2001:500:48::1, 2001:500:b::1, 2001:500:c::1, 2001:500:e::1, 2001:500:f::1
Status:secure

Close