View on GitHub
asap.gov
Updated:
2021-07-12 20:30:04 UTC
(
871 days ago
)
Go to most recent »
« Previous analysis
|
Next analysis »
Tweet
DNSSEC
Responses
Servers
Analyze
DNSSEC options (
hide
)
|?|
RR types:
--All--
A
AAAA
TXT
PTR
MX
NS
SOA
CNAME
SRV
NAPTR
TLSA
NSEC3PARAM
CAA
|?|
DNSSEC algorithms:
--All--
1 - RSA/MD5
3 - DSA/SHA1
5 - RSA/SHA-1
6 - DSA-NSEC3-SHA1
7 - RSASHA1-NSEC3-SHA1
8 - RSA/SHA-256
10 - RSA/SHA-512
12 - GOST R 34.10-2001
13 - ECDSA Curve P-256 with SHA-256
14 - ECDSA Curve P-384 with SHA-384
15 - Ed25519
16 - Ed448
|?|
DS digest algorithms:
--All--
1 - SHA-1
2 - SHA-256
3 - GOST R 34.11-94
4 - SHA-384
|?|
Denial of existence:
|?|
Redundant edges:
|?|
Trust anchors:
Root zone KSK
|?|
Additional trusted keys:
Notices
DNSSEC Authentication Chain
RRset status
Secure
(5)
asap.gov/A
asap.gov/AAAA
asap.gov/NS
asap.gov/SOA
asap.gov/TXT
DNSKEY/DS/NSEC status
Secure
(14)
./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 26838)
asap.gov/DNSKEY (alg 7, id 50390)
asap.gov/DNSKEY (alg 7, id 63486)
asap.gov/DNSKEY (alg 7, id 65349)
asap.gov/DNSKEY (alg 7, id 8330)
asap.gov/DS (alg 7, id 63486)
asap.gov/DS (alg 7, id 63486)
asap.gov/DS (alg 7, id 65349)
asap.gov/DS (alg 7, id 65349)
gov/DNSKEY (alg 8, id 48498)
gov/DNSKEY (alg 8, id 57735)
gov/DNSKEY (alg 8, id 7698)
gov/DS (alg 8, id 7698)
Delegation status
Secure
(2)
. to gov
gov to asap.gov
Notices
Warnings
(123)
RRSIG asap.gov/A alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/A alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/A alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/A alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/A alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/A alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/AAAA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/AAAA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/AAAA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/AAAA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/AAAA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/AAAA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/AAAA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/AAAA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 63486: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 65349: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/DNSKEY alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/NS alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/NS alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/NS alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/NS alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/NS alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/NS alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/NS alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/NS alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/SOA alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/TXT alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/TXT alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/TXT alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/TXT alg 7, id 50390: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/TXT alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/TXT alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/TXT alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
RRSIG asap.gov/TXT alg 7, id 8330: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
asap.gov/DS (alg 7, id 63486): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
asap.gov/DS (alg 7, id 63486): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
asap.gov/DS (alg 7, id 63486): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
asap.gov/DS (alg 7, id 63486): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
asap.gov/DS (alg 7, id 65349): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
asap.gov/DS (alg 7, id 65349): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
asap.gov/DS (alg 7, id 65349): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
asap.gov/DS (alg 7, id 65349): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
gov to asap.gov: Authoritative AAAA records exist for ns1.twai.gov, but there are no corresponding AAAA glue records.
DNSKEY legend
Full legend
SEP bit set
Revoke bit set
Trust anchor
See also
DNSSEC Debugger
by
Verisign Labs
.
Download:
png
|
svg
JavaScript is required to make the graph below interactive.