.xn--mgbx4cd0ab TLD DNSSEC Outage: 2017-04-03

Updated: April 17, 2017

Overview

This page gives some details on the .xn--mgbx4cd0ab (Malaysia IDN) TLD DNSSEC outage that began April 3, 2017.

Timeline / DNSViz

• 2017-04-03 06:17:45 UTC — RRSIGs expire
• 2017-04-03 09:20:24 UTC — expired RRSIGs
• 2017-04-04 09:20:34 UTC — expired RRSIGs
• 2017-04-05 09:20:00 UTC — expired RRSIGs
• 2017-04-06 09:20:19 UTC — expired RRSIGs
• 2017-04-07 09:20:11 UTC — expired RRSIGs
• 2017-04-08 09:19:57 UTC — expired RRSIGs
• 2017-04-09 09:20:37 UTC — expired RRSIGs
• 2017-04-10 09:20:36 UTC — expired RRSIGs
• 2017-04-11 09:20:21 UTC — expired RRSIGs
• 2017-04-16 09:20:27 UTC — expired RRSIGs

DNSSEC Debugger

Unlike DNSViz, Verisign's DNSSEC Debugger doesn't archive results, so here's a screenshot of my web browser's output from April 3, 2017:

Zonemaster

• zonemaster.net archived "Delegation from parent to child is not properly signed (signature: DNSSEC signature has expired)."

Logfile examples

• [1491203153] unbound[27415:0] info: validation failure <xn--mgbx4cd0ab. NS IN>: signature expired from 103.44.108.3
• [1491214918] unbound[27415:0] info: validation failure <xn--mgbx4cd0ab. NS IN>: signature expired from 192.134.0.49 for key xn--mgbx4cd0ab. while building chain of trust
• [1491219451] unbound[27415:0] info: validation failure <xn--mgbx4cd0ab. NS IN>: signature expired from 137.189.6.21 for key xn--mgbx4cd0ab. while building chain of trust
• [1491221825] unbound[27415:0] info: validation failure <xn--mgbx4cd0ab. NS IN>: signature expired from 49.236.194.202 for key xn--mgbx4cd0ab. while building chain of trust