For some reason the CAA Validator stopped rejecting nonsense domains:
albion:ejbca_alpha mikek$ java -jar dist/caa-cli/caa-cli.jar caalookup --dns 220.127.116.11 --issuer "ca.com" --domains dfgdgdf.orgkg.
CAA lookup gave the following results:
Domain Name Issuer Result
dfgdgdf.orgkg. ca.com May issue, DNS lookup gave no CAA results for domain.