Ten days ago, Oracle announced that they are going to audit us. The audit is supposed to begin in fourteen days. Is this procedure legit?

No, this is not a legit procedure. According to the General Terms, Oracle has to announce an audit in writing 45 days prior to the start of the audit.

Source: Oracle General Terms, December 2016