dnssec-tracker

dnslab.us — key 8119

← back to zone

Clear

For KSKs the DS lifecycle at the parent stays visible under role=KSK; switching to role=ZSK additionally drops dns_ds_*, dns_cds_*, and dns_cdnskey_* events since ZSKs have no parent presence.

ZSK · tag 8119

Algorithm: 14
Key id: Kdnslab.us.+014+08119
First seen: 2026-04-11T11:03:18Z

K*.key file timings
FieldValue
Created 2026-02-14 20:56:30 UTC
Publish 2026-02-14 20:56:30 UTC
Activate 2026-02-14 22:11:30 UTC
Revoke —
Inactive 2026-04-15 22:11:30 UTC
Delete 2026-04-25 23:16:30 UTC
SyncPublish —
SyncDelete —
K*.state file — state machine
FieldValue
GoalStatehidden
DNSKEYStateomnipresent
ZRRSIGStateunretentive
K*.state file — timestamps
FieldValue
Generated20260214205630 (Sat Feb 14 20:56:30 2026)
Published20260214205630 (Sat Feb 14 20:56:30 2026)
Active20260214221130 (Sat Feb 14 22:11:30 2026)
Retired20260415221130 (Wed Apr 15 22:11:30 2026)
Removed20260425231630 (Sat Apr 25 23:16:30 2026)
DNSKEYChange20260214221130 (Sat Feb 14 22:11:30 2026)
ZRRSIGChange20260415221130 (Wed Apr 15 22:11:30 2026)

Timing changes observed

Every time a value in a K*.key or K*.state file moved — whether from dnssec-settime, iodyn-dnssec, or BIND's own state machine.

WhenSourceFieldOldNew
2026-04-15T22:11:44Z state ZRRSIGChange 20260224231630 (Tue Feb 24 23:16:30 2026) 20260415221130 (Wed Apr 15 22:11:30 2026)

Rollover view

This key's lifecycle on a time axis with phase colouring. For KSKs the DS-at-parent overlay stripe shows when the parent-side chain of trust was actually complete, independently of BIND's internal state machine.

2026-04-11 11:03 → 2026-04-15 22:18 UTC2026-04-112026-04-122026-04-122026-04-132026-04-132026-04-142026-04-142026-04-152026-04-15ZSK · alg 14tag 8119ZSK tag 8119 alg 14 — active signing DNSKEY / zone data 2026-04-11 11:03 → 2026-04-15 22:11 UTCactiveZSK tag 8119 alg 14 — inactive not signing, published for resolver caches, awaiting delete 2026-04-15 22:11 → 2026-04-15 22:18 UTCnowpre-publishedpublishedactiveinactiveremoved

Calendar view

← earlier 2024-12 later →
on-disk staterndc dnssec -statusDNS probeK*.key timingiodyn / syslognamed.logscheduled (from K*.key)today
November 2024
MonTueWedThuFriSatSun
28293031123
45678910
11121314151617
18192021222324
2526272829301
December 2024
MonTueWedThuFriSatSun
2526272829301
2345678
9101112131415
16171819202122
23242526272829
303112345
January 2025
MonTueWedThuFriSatSun
303112345
6789101112
13141516171819
20212223242526
272829303112

DNS event timeline

Live DNS observations and rndc dnssec -status reports for this key. For KSKs this includes the DS lifecycle at the parent zone (captured by key tag from the DS rdata).

2026-04-11 11:03 → 2026-04-15 22:13 UTCrndcdns2026-04-112026-04-122026-04-122026-04-132026-04-132026-04-142026-04-142026-04-152026-04-1520:57:22 [rndc] rndc_state_changed: dnslab.us ZSK tag=8119 goal: omnipresent -> hidden222:13:04 [rndc] rndc_state_changed: dnslab.us ZSK tag=8119 zone_signing: yes -> no 22:13:04 [rndc] rndc_state_changed: dnslab.us ZSK tag=8119 zone_rrsig: omnipresent -> unretentive11:03:18 [dns] dns_dnskey_appeared_at_zone: DNSKEY (key tag 8119) appeared at zone for dnslab.us13:03:17 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 8119) appeared at zone for dnslab.us220:56:34 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 8119) disappeared at zone for dnslab.us 20:56:34 [dns] dns_rrsig_appeared_at_zone: RRSIG over SOA (key tag 8119) appeared at zone for dnslab.us22:12:06 [dns] dns_rrsig_disappeared_at_zone: RRSIG over SOA (key tag 8119) disappeared at zone for dnslab.us

File event timeline

On-disk changes to this key's K*.state / K*.key files.

2026-04-11 11:03 → 2026-04-15 22:11 UTCstatekey2026-04-112026-04-122026-04-122026-04-132026-04-132026-04-142026-04-142026-04-152026-04-1511:03:18 [state] state_key_observed: new K*.state for dnslab.us ZSK tag=811920:56:35 [state] state_changed: dnslab.us ZSK tag=8119 GoalState: omnipresent -> hidden222:11:44 [state] state_timing_changed: dnslab.us ZSK tag=8119 ZRRSIGChange: 20260224231630 (Tue Feb 24 23:16:30 2026) -> 20260415221130 (Wed Apr 15 22:11:30 2026) 22:11:44 [state] state_changed: dnslab.us ZSK tag=8119 ZRRSIGState: omnipresent -> unretentive11:03:18 [key] key_file_observed: new K*.key for dnslab.us ZSK tag=8119

All events for this key

WhenSourceTypeSummary
2026-04-15T22:13:04Z rndc rndc_state_changed dnslab.us ZSK tag=8119 zone_signing: yes -> no
2026-04-15T22:13:04Z rndc rndc_state_changed dnslab.us ZSK tag=8119 zone_rrsig: omnipresent -> unretentive
2026-04-15T22:12:06Z dns dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8119) disappeared at zone for dnslab.us
2026-04-15T22:11:44Z state state_timing_changed dnslab.us ZSK tag=8119 ZRRSIGChange: 20260224231630 (Tue Feb 24 23:16:30 2026) -> 20260415221130 (Wed Apr 15 22:11:30 2026)
2026-04-15T22:11:44Z state state_changed dnslab.us ZSK tag=8119 ZRRSIGState: omnipresent -> unretentive
2026-04-15T20:57:22Z rndc rndc_state_changed dnslab.us ZSK tag=8119 goal: omnipresent -> hidden
2026-04-15T20:56:35Z state state_changed dnslab.us ZSK tag=8119 GoalState: omnipresent -> hidden
2026-04-15T20:56:34Z dns dns_rrsig_disappeared_at_zone RRSIG over SOA (key tag 8119) disappeared at zone for dnslab.us
2026-04-15T20:56:34Z dns dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8119) appeared at zone for dnslab.us
2026-04-11T13:03:17Z dns dns_rrsig_appeared_at_zone RRSIG over SOA (key tag 8119) appeared at zone for dnslab.us
2026-04-11T11:03:18Z dns dns_dnskey_appeared_at_zone DNSKEY (key tag 8119) appeared at zone for dnslab.us
2026-04-11T11:03:18Z key key_file_observed new K*.key for dnslab.us ZSK tag=8119
2026-04-11T11:03:18Z state state_key_observed new K*.state for dnslab.us ZSK tag=8119