Formal Analysis of the ACE Specification for Cache Coherent Systems-on-Chip