EXPCHK(1)

๐Ÿ“ฆ
version 2.2.3 ยท 2 versions
, in fedora 43

๐Ÿ’– expchk(1) โ€” the girlies' guide to expired zones ๐Ÿ’–

okay so bestie, you know how DNS zones have expiry dates and nobody ever checks them until everything is on fire? ๐Ÿซ  That's what expchk is for. It's a little tool from the DNSSEC-Tools package (this is the expchk page from the User Contributed Perl Documentation section of your manual, iykyk) and it literally just... tells you which zones are expired. No cap. ๐Ÿ‘‘


โœจ NAME โœจ

expchk โ€” check a keyrec file for expired zones. that's it, that's the job. ๐ŸŽ€


๐ŸŒธ SYNOPSIS ๐ŸŒธ

expchk -all -expired -valid -warn numdays -zone zonename -count -help keyrec_files

๐Ÿฆ‹ DESCRIPTION ๐Ÿฆ‹

So expchk takes a set of keyrec files and goes through them to figure out whether each zone keyrec is valid or expired. It's giving vibe check, but for keyrecs. ๐Ÿ’…

Which kind of zones get displayed depends entirely on the options you pick. And here's the little plot twist: if you give it no options at all, it'll just list the expired zones for you. Default behaviour, slaying quietly. ๐Ÿ™ˆ


๐Ÿ’… OPTIONS ๐Ÿ’…

  • -all โ€” show expiration info for every single zone, expired or valid, in the keyrec files you named. no zone left behind fr fr. โœจ
  • -expired โ€” show expiration info for just the expired zones in the specified keyrec files. This is the default action, so it's the main character even when you don't say anything. ๐Ÿ‘‘
  • -valid โ€” show expiration info for just the valid zones in the specified keyrec files. good news zones only, we love a healthy zone. ๐ŸŒธ
  • -warn numdays โ€” gives you a warning for each valid zone that's gonna expire in numdays days. โฐ Heads up bestie!! And btw, this option has no effect on expired zones โ€” expired is expired, the warning ship has sailed. ๐Ÿ’€
  • -zone zonename โ€” show expiration info for the zone you name in zonename. just the one. we're being specific. ๐ŸŽฏ
  • -count โ€” only gives you the count of matching zones (valid or expired), no details, just the number. And if you selected both types of zones, then the count will be the number of zones in the specified keyrec files. math is math. ๐Ÿงฎ
  • -help โ€” displays a usage message. your friendly lil helper. ๐Ÿซถ
  • -Version โ€” displays the version information for expchk and the DNSSEC-Tools package. (capital V, don't come for me, that's just how it is.) โญ

Copyright 2004-2014 SPARTA, Inc. All rights reserved. See the COPYING file included with the DNSSEC-Tools package for details. ๐Ÿซก


๐ŸŒˆ AUTHOR ๐ŸŒˆ

Wayne Morrison, tewok@tislabs.com ๐Ÿ’–


๐Ÿ‘€ SEE ALSO ๐Ÿ‘€

  • zonesigner(8)
  • Net::DNS::SEC::Tools::keyrec.pm(3)

and that's the whole page, bestie!! this one came from perl v5.42.0 and it's dated 2025-07-23. go check those zones before they expire on you, mwah ๐Ÿ’‹๐ŸŒธ๐Ÿฆ‹

๐Ÿ“ฆ where this page comes from