phreaknet.org
Updated:
2020-10-20 00:00:22 UTC (4 years ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Bogus (6)
- phreaknet.org/A
- phreaknet.org/AAAA
- phreaknet.org/MX
- phreaknet.org/NS
- phreaknet.org/SOA
- phreaknet.org/TXT
DNSKEY/DS/NSEC status
Bogus (2)
- phreaknet.org/DNSKEY (alg 13, id 2371)
- phreaknet.org/DNSKEY (alg 13, id 34505)
Secure (7)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 26116)
- org/DNSKEY (alg 8, id 26974)
- org/DNSKEY (alg 8, id 34266)
- org/DNSKEY (alg 8, id 63858)
- org/DS (alg 8, id 26974)
- phreaknet.org/DS (alg 13, id 2371)
Non_existent (1)
- org/DNSKEY (alg 7, id 22064)
Delegation status
Bogus (1)
- org to phreaknet.org
Secure (1)
- . to org
Notices
Errors (4)
- RRSIG phreaknet.org/DNSKEY alg 13, id 2371: The Signature Expiration field of the RRSIG RR (2020-10-18 21:55:18+00:00) is 1 day in the past. See RFC 4035, Sec. 5.3.1.
- RRSIG phreaknet.org/DNSKEY alg 13, id 2371: The Signature Expiration field of the RRSIG RR (2020-10-18 21:55:18+00:00) is 1 day in the past. See RFC 4035, Sec. 5.3.1.
- org to phreaknet.org: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (108.162.192.151, 108.162.193.243, 172.64.32.151, 172.64.33.243, 173.245.58.151, 173.245.59.243, 2606:4700:50::adf5:3a97, 2606:4700:58::adf5:3bf3, 2803:f800:50::6ca2:c097, 2803:f800:50::6ca2:c1f3, 2a06:98c1:50::ac40:2097, 2a06:98c1:50::ac40:21f3, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
- phreaknet.org/DNSKEY has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (2)
- RRSIG phreaknet.org/DS alg 7, id 22064: DNSSEC implementers are recommended against implementing signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1). See RFC 8624, Sec. 3.1.
- phreaknet.org/DS has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
