The object of the present invention is to provide a reproduction apparatus that is capable of preventing personal information of users from being transmitted to an external apparatus that is under management of a malicious person.The reproduction apparatus uses a revocation list and a valid-content list in combination in order to prevent transmission of personal information of users. It is possible to prevent transmission of personal information by revoking certificates to be revoked because of being exposed or hacked at a certain timing, by listing them in the revocation list. Meanwhile, it is possible to allow use of contents that have been manufactured before the exposure, by listing them in the valid-content list. Accordingly, it is possible to realize both the security and the user convenience at the same time.