.pr (Puerto Rico) TLD DNSSEC Outage:
2018-01-28 to 2018-01-31

Updated: April 22, 2018

Overview

This page gives some details on the pr TLD DNSSEC outage from January 28 to January 31, 2018. The DNSSEC outage itself was in all subdomains such as org.pr, net.pr, etc. (The full list is ac.pr, biz.pr, edu.pr, est.pr, gov.pr, info.pr, isla.pr, name.pr, net.pr, org.pr, pro.pr, prof.pr.)

Timeline / DNSViz

• 2018-01-28 17:48:04 UTC — edu.pr expired RRSIGs
• 2018-01-28 17:48:36 UTC — est.pr expired RRSIGs
• 2018-01-28 17:49:53 UTC — gov.pr expired RRSIGs
• 2018-01-28 17:51:33 UTC — info.pr expired RRSIGs
• 2018-01-28 17:52:02 UTC — isla.pr expired RRSIGs
• 2018-01-28 17:55:23 UTC — name.pr expired RRSIGs
• 2018-01-28 17:57:27 UTC — org.pr expired RRSIGs
• 2018-01-28 17:58:42 UTC — pro.pr expired RRSIGs
• 2018-01-28 17:59:08 UTC — prof.pr expired RRSIGs
• 2018-01-28 18:04:59 UTC — ac.pr expired RRSIGs
• 2018-01-28 18:06:21 UTC — biz.pr expired RRSIGs

Zonemaster

zonemaster.net archived the following DNSSEC outages:

• gov.pr: "Delegation from parent to child is not properly signed (signature: DNSSEC signature has expired)."
• org.pr: "Delegation from parent to child is not properly signed (signature: DNSSEC signature has expired)."
• ac.pr: "Delegation from parent to child is not properly signed (signature: DNSSEC signature has expired)."
• biz.pr: "Delegation from parent to child is not properly signed (signature: DNSSEC signature has expired)."
• edu.pr: "Delegation from parent to child is not properly signed (signature: DNSSEC signature has expired)."
• est.pr: "Delegation from parent to child is not properly signed (signature: DNSSEC signature has expired)."

Logfile examples

• [1517161782] unbound[19284:0] info: validation failure <gov.pr. NS IN>: signature expired from 199.254.61.17 for key gov.pr. while building chain of trust
• [1517162231] unbound[19284:0] info: validation failure <org.pr. NS IN>: signature expired from 199.249.124.17 for key org.pr. while building chain of trust
• [1517164811] unbound[19284:0] info: validation failure <net.pr. NS IN>: no NSEC3 records from 199.254.60.17 for DS net.pr. while building chain of trust