[46793255] return error if given a past expiration time

Signed-off-by: Henry Chen <hchen@vmware.com>