The compliance department needs a report of all cards that have expired. Return card id, account_id, card_number, card_type, and expiry_date for cards where the status is 'expired'. Sort by expiry_date ascending.