Model Checking Interlocking Control Tables