Azure Attestation

How can I check revocation for a Microsoft TPM AIK certificate without a CRL or OCSP endpoint?

I enrolled a TPM 2.0 Attestation Identity Key (AIK) on a physical Windows 11 Home device using certreq.exe -enrollaik. Enrollment succeeded, and the public key in the issued certificate matches the local TPM key.

The AIK leaf certificate contains a CA Issuers AIA URL, but no CRL distribution point or OCSP URL. Windows reports RevocationStatusUnknown and OfflineRevocation for the leaf. The issuing CA certificate passed a separate revocation check against Microsoft's published CRL.

What supported method can an independent verifier use to check revocation for the AIK leaf certificate? If Azure Attestation performs that check, which signed claim or error indicates the outcome? Is there Microsoft documentation that defines the expected validation behavior for this certificate profile?