Package net.ripe.rpki.commons.crypto.x509cert

Class X509CertificateUtil

java.lang.Object

net.ripe.rpki.commons.crypto.x509cert.X509CertificateUtil

public final class X509CertificateUtil
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static String	RSYNC

Method Summary

Modifier and Type	Method	Description
static URI	findFirstAuthorityInformationAccessByMethod(X509Certificate certificate, org.bouncycastle.asn1.ASN1ObjectIdentifier method)
static URI	findFirstRsyncCrlDistributionPoint(X509Certificate certificate)
static URI	findFirstSubjectInformationAccessByMethod(X509Certificate certificate, org.bouncycastle.asn1.ASN1ObjectIdentifier method)
static List<String>	getAsns(X509Certificate certificate)
static X509CertificateInformationAccessDescriptor[]	getAuthorityInformationAccess(X509Certificate certificate)
static byte[]	getAuthorityKeyIdentifier(X509Extension certificate)
static URI[]	getCrlDistributionPoints(X509Certificate certificate)
static String	getEncodedSubjectPublicKeyInfo(X509Certificate certificate)	Get a base 64-encoded, DER-encoded X.509 subjectPublicKeyInfo as used for the Trust Anchor Locator (TAL)
static X500Principal	getIssuer(X509Certificate certificate)
static URI	getManifestUri(X509Certificate certificate)
static PublicKey	getPublicKey(X509Certificate certificate)
static URI	getRepositoryUri(X509Certificate certificate)
static URI	getRrdpNotifyUri(X509Certificate certificate)
static BigInteger	getSerialNumber(X509Certificate certificate)
static X500Principal	getSubject(X509Certificate certificate)
static X509CertificateInformationAccessDescriptor[]	getSubjectInformationAccess(X509Certificate certificate)
static byte[]	getSubjectKeyIdentifier(X509Extension certificate)
static ValidityPeriod	getValidityPeriod(X509Certificate certificate)
static boolean	isCa(X509Certificate certificate)
static boolean	isEe(X509Certificate certificate)
static boolean	isObjectIssuer(X509Certificate certificate)
static boolean	isRoot(X509Certificate certificate)
static boolean	isRouter(X509Certificate certificate)
static X509ResourceCertificate	parseDerEncoded(byte[] encoded)
static X509Certificate	parseX509Certificate(byte[] encoded)
static void	verify(X509Certificate certificate, PublicKey publicKey)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

RSYNC

public static final String RSYNC

See Also:

Constant Field Values

Method Detail

getSubjectKeyIdentifier

public static byte[] getSubjectKeyIdentifier(X509Extension certificate)

getAuthorityKeyIdentifier

public static byte[] getAuthorityKeyIdentifier(X509Extension certificate)

parseDerEncoded

public static X509ResourceCertificate parseDerEncoded(byte[] encoded)

parseX509Certificate

public static X509Certificate parseX509Certificate(byte[] encoded)

getEncodedSubjectPublicKeyInfo

public static String getEncodedSubjectPublicKeyInfo(X509Certificate certificate)

Get a base 64-encoded, DER-encoded X.509 subjectPublicKeyInfo as used for the Trust Anchor Locator (TAL)

Throws:

X509CertificateOperationException - when SPKI can not be extracted

isRoot

public static boolean isRoot(X509Certificate certificate)

isCa

public static boolean isCa(X509Certificate certificate)

isEe

public static boolean isEe(X509Certificate certificate)

isRouter

public static boolean isRouter(X509Certificate certificate)

getAuthorityInformationAccess

public static X509CertificateInformationAccessDescriptor[] getAuthorityInformationAccess(X509Certificate certificate)

getSubjectInformationAccess

public static X509CertificateInformationAccessDescriptor[] getSubjectInformationAccess(X509Certificate certificate)

findFirstAuthorityInformationAccessByMethod

public static URI findFirstAuthorityInformationAccessByMethod(X509Certificate certificate,
                                                              org.bouncycastle.asn1.ASN1ObjectIdentifier method)

findFirstSubjectInformationAccessByMethod

public static URI findFirstSubjectInformationAccessByMethod(X509Certificate certificate,
                                                            org.bouncycastle.asn1.ASN1ObjectIdentifier method)

getCrlDistributionPoints

public static URI[] getCrlDistributionPoints(X509Certificate certificate)

findFirstRsyncCrlDistributionPoint

public static URI findFirstRsyncCrlDistributionPoint(X509Certificate certificate)

getManifestUri

public static URI getManifestUri(X509Certificate certificate)

getRepositoryUri

public static URI getRepositoryUri(X509Certificate certificate)

getRrdpNotifyUri

public static URI getRrdpNotifyUri(X509Certificate certificate)

isObjectIssuer

public static boolean isObjectIssuer(X509Certificate certificate)

getValidityPeriod

public static ValidityPeriod getValidityPeriod(X509Certificate certificate)

getSerialNumber

public static BigInteger getSerialNumber(X509Certificate certificate)

getSubject

public static X500Principal getSubject(X509Certificate certificate)

getIssuer

public static X500Principal getIssuer(X509Certificate certificate)

getPublicKey

public static PublicKey getPublicKey(X509Certificate certificate)

verify

public static void verify(X509Certificate certificate,
                          PublicKey publicKey)
                   throws InvalidKeyException,
                          SignatureException

Throws:

InvalidKeyException

SignatureException

getAsns

public static List<String> getAsns(X509Certificate certificate)