View on GitHub
fail03.dnssec.works
Updated:
2023-09-28 12:08:19 UTC
(
450 days ago
)
Update now
« Previous analysis
|
Next analysis »
Tweet
DNSSEC
Responses
Servers
Analyze
DNSSEC options (
hide
)
|?|
RR types:
--All--
A
AAAA
TXT
PTR
MX
NS
SOA
CNAME
SRV
NAPTR
TLSA
NSEC3PARAM
CDNSKEY
CDS
CAA
|?|
DNSSEC algorithms:
--All--
1 - RSA/MD5
3 - DSA/SHA1
5 - RSA/SHA-1
6 - DSA-NSEC3-SHA1
7 - RSASHA1-NSEC3-SHA1
8 - RSA/SHA-256
10 - RSA/SHA-512
12 - GOST R 34.10-2001
13 - ECDSA Curve P-256 with SHA-256
14 - ECDSA Curve P-384 with SHA-384
15 - Ed25519
16 - Ed448
|?|
DS digest algorithms:
--All--
1 - SHA-1
2 - SHA-256
3 - GOST R 34.11-94
4 - SHA-384
|?|
Denial of existence:
|?|
Redundant edges:
|?|
Ignore RFC 8624:
|?|
Ignore RFC 9276:
|?|
Multi-signer:
|?|
Trust anchors:
Root zone KSK
|?|
Additional trusted keys:
Notices
DNSSEC Authentication Chain
RRset status
Bogus
(1)
fail03.dnssec.works/A
Secure
(4)
fail03.dnssec.works/AAAA
fail03.dnssec.works/NS
fail03.dnssec.works/SOA
fail03.dnssec.works/TXT
DNSKEY/DS/NSEC status
Secure
(13)
./DNSKEY (alg 8, id 11019)
./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 46780)
dnssec.works/DNSKEY (alg 8, id 41779)
dnssec.works/DNSKEY (alg 8, id 63306)
dnssec.works/DS (alg 8, id 41779)
fail03.dnssec.works/DNSKEY (alg 8, id 4699)
fail03.dnssec.works/DNSKEY (alg 8, id 8628)
fail03.dnssec.works/DS (alg 8, id 4699)
works/DNSKEY (alg 8, id 2343)
works/DNSKEY (alg 8, id 31980)
works/DNSKEY (alg 8, id 46672)
works/DS (alg 8, id 46672)
Delegation status
Secure
(3)
. to works
dnssec.works to fail03.dnssec.works
works to dnssec.works
Notices
Errors
(5)
RRSIG fail03.dnssec.works/A alg 8, id 8628: The cryptographic signature of the RRSIG RR does not properly validate. See RFC 4035, Sec. 5.3.3.
fail03.dnssec.works zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (37.153.96.134)
fail03.dnssec.works/A: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (37.153.96.134, UDP_-_NOEDNS_)
fail03.dnssec.works/NS: No response was received from the server over UDP (tried 12 times). See RFC 1035, Sec. 4.2. (37.153.96.134, UDP_-_NOEDNS_)
works zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (65.22.24.6)
DNSKEY legend
Full legend
SEP bit set
Revoke bit set
Trust anchor
See also
DNSSEC Debugger
by
Verisign Labs
.
Download:
png
|
svg
JavaScript is required to make the graph below interactive.