What is RRCReestablishmentRequest in 5G NR?

It is the uplink NR RRC recovery message the UE sends to request re-establishment of an existing RRC connection after a connected-mode failure.

Does RRCReestablishmentRequest use SRB0 or SRB1?

It is sent on SRB0 using CCCH and RLC TM, not on SRB1.

What is shortMAC-I in RRCReestablishmentRequest?

shortMAC-I is a 16-bit verification value derived from the previous AS security context and used by the network to identify and validate the UE during re-establishment.

What comes after RRCReestablishmentRequest?

If the network can retrieve and verify the UE context, it responds with RRCReestablishment and the UE then sends RRCReestablishmentComplete. If not, the network may fall back to RRCSetup followed by RRCSetupComplete.

Can any connected UE send RRCReestablishmentRequest?

No. The UE initiates re-establishment only when the required AS security and bearer conditions are satisfied.