View on GitHub
srs.gov
Updated:
2022-12-22 00:28:06 UTC
(
499 days ago
)
Go to most recent »
« Previous analysis
|
Next analysis »
Tweet
DNSSEC
Responses
Servers
Analyze
DNSSEC options (
hide
)
|?|
RR types:
--All--
A
AAAA
TXT
PTR
MX
NS
SOA
CNAME
SRV
NAPTR
TLSA
NSEC3PARAM
CAA
|?|
DNSSEC algorithms:
--All--
1 - RSA/MD5
3 - DSA/SHA1
5 - RSA/SHA-1
6 - DSA-NSEC3-SHA1
7 - RSASHA1-NSEC3-SHA1
8 - RSA/SHA-256
10 - RSA/SHA-512
12 - GOST R 34.10-2001
13 - ECDSA Curve P-256 with SHA-256
14 - ECDSA Curve P-384 with SHA-384
15 - Ed25519
16 - Ed448
|?|
DS digest algorithms:
--All--
1 - SHA-1
2 - SHA-256
3 - GOST R 34.11-94
4 - SHA-384
|?|
Denial of existence:
|?|
Redundant edges:
|?|
Trust anchors:
Root zone KSK
|?|
Additional trusted keys:
Notices
DNSSEC Authentication Chain
RRset status
Insecure
(4)
srs.gov/MX
srs.gov/NS
srs.gov/SOA
srs.gov/TXT
Secure
(1)
gov/SOA
DNSKEY/DS/NSEC status
Secure
(7)
./DNSKEY (alg 8, id 18733)
./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 951)
NSEC3 proving non-existence of srs.gov/DS
gov/DNSKEY (alg 8, id 56278)
gov/DNSKEY (alg 8, id 7698)
gov/DS (alg 8, id 7698)
Delegation status
Insecure
(1)
gov to srs.gov
Secure
(1)
. to gov
Notices
Errors
(9)
srs.gov zone: The following NS name(s) resolved to IP address(es) in private IP address space: ns1.srs.gov
srs.gov zone: The server(s) responded over TCP with a malformed response or with an invalid RCODE. (192.33.240.10, 2620:b0:8000:2012::17)
srs.gov zone: The server(s) responded over UDP with a malformed response or with an invalid RCODE. (192.33.240.10, 2620:b0:8000:2012::17)
srs.gov/DNSKEY: The response had an invalid RCODE (REFUSED). (192.33.240.10, 2620:b0:8000:2012::17, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
srs.gov/MX: The response had an invalid RCODE (REFUSED). (192.33.240.10, 2620:b0:8000:2012::17, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
srs.gov/NS: The response had an invalid RCODE (REFUSED). (192.33.240.10, 2620:b0:8000:2012::17, UDP_-_EDNS0_4096_D_KN)
srs.gov/SOA: The response had an invalid RCODE (REFUSED). (192.33.240.10, 2620:b0:8000:2012::17, TCP_-_EDNS0_4096_D_N)
srs.gov/SOA: The response had an invalid RCODE (REFUSED). (192.33.240.10, 2620:b0:8000:2012::17, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)
srs.gov/TXT: The response had an invalid RCODE (REFUSED). (192.33.240.10, 2620:b0:8000:2012::17, UDP_-_EDNS0_4096_D_KN)
Warnings
(1)
gov to srs.gov: The glue address(es) for ns1.srs.gov (192.33.240.10) differed from its authoritative address(es) (192.33.240.10, 192.168.7.17).
DNSKEY legend
Full legend
SEP bit set
Revoke bit set
Trust anchor
See also
DNSSEC Debugger
by
Verisign Labs
.
Download:
png
|
svg
JavaScript is required to make the graph below interactive.