show crypto isa sa detail -- will tell you phase 1, you need compare "lifetime" with "Liftetime Remaining"
show crypto ipsec sa -- will tell you phase 2, refer to the line "sa timing: remaining key lifetime"
show vpn-sessiondb xxxx -- will tell you Login time/Duration.
