X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension

src/libstrongswan/credentials/certificates/x509.h

@@ -46,6 +46,8 @@ enum x509_flag_t {
 	X509_SERVER_AUTH = 	  (1<<3),
 	/** cert is self-signed */
 	X509_SELF_SIGNED =    (1<<4),
+	/** cert has an ipAddrBlocks extension */
+	X509_IP_ADDR_BLOCKS = (1<<5),
 };
 
 /**

src/libstrongswan/plugins/x509/x509_cert.c

@@ -803,6 +803,7 @@ static void parse_ipAddrBlocks(chunk_t blob, int level0,
 				break;
 		}
 	}
+	this->flags |= X509_IP_ADDR_BLOCKS;
 	
 end:
 	parser->destroy(parser);