Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2012-05-18 18:00:31 UTC, NTP stratum 3

Analyzing DNSSEC problems for doc.gov

.
Found 2 DNSKEY records for .
DS=19036/SHA1 verifies DNSKEY=19036/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=19036 and DNSKEY=19036/SEP verifies the DNSKEY RRset
gov
Found 2 DS records for gov in the . zone
Found 1 RRSIGs over DS RRset
RRSIG=56158 and DNSKEY=56158 verifies the DS RRset
Found 3 DNSKEY records for gov
DS=53138/SHA1 verifies DNSKEY=53138/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=53138 and DNSKEY=53138/SEP verifies the DNSKEY RRset
doc.gov
Found 6 DS records for doc.gov in the gov zone
Found 1 RRSIGs over DS RRset
RRSIG=35464 and DNSKEY=35464 verifies the DS RRset
Found 5 DNSKEY records for doc.gov
DS=49301/SHA1 verifies REVOKED DNSKEY=49301/SEP
DS=59184/SHA1 verifies DNSKEY=59184/SEP
DS=62339/SHA1 verifies REVOKED DNSKEY=62339/SEP
Found 4 RRSIGs over DNSKEY RRset
RRSIG=54657 and DNSKEY=54657 verifies the DNSKEY RRset
doc.gov A RR has value 170.110.225.194
Found 1 RRSIGs over A RRset
RRSIG=54657 and DNSKEY=54657 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test doc.gov at dnsviz.net.

DNSSEC Analyzer r47 2012-05-11 09:42:31

↓ Advanced options